An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM prior to 1.0.50.
mi xiaomi_r3600_firmware