CVE-2020-14112

{"id": "CVE-2020-14112", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2022-03-10T17:41:16.577", "references": [{"url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=34", "tags": ["Vendor Advisory"], "source": "security@xiaomi.com"}, {"url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=34", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing configuration. Attackers can exploit this vulnerability to download part of the files in Xiaomi Router AX6000."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de filtrado de informaci\u00f3n en Xiaomi Router AX6000. La vulnerabilidad est\u00e1 causada por una configuraci\u00f3n incorrecta del enrutamiento. Los atacantes pueden explotar esta vulnerabilidad para descargar parte de los archivos en Xiaomi Router AX6000"}], "lastModified": "2024-11-21T05:02:40.653", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mi:ax6000_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C09980C-061A-41DD-AF3C-C9DBBB61FEF8", "versionEndExcluding": "1.0.56"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mi:ax6000:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "AFB5036E-CEBF-47DB-8626-79B79D3D5B1C"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@xiaomi.com"}