high7.5
CVE-2020-14097
Wrong nginx configuration, causing specific paths to be downloaded without authorization.
Impact
Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6 ROM version < 1.0.18.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mi | Redmi Ax6 Firmware | before 1.0.18 |