Mi vulnerabilities

Products

• Miui 8
• Ax3600 Firmware 6
• Ax1800 Firmware 5
• Xiaomi R3600 Firmware 5
• Browser 4
• Rm1800 Firmware 4
• A2 Lite Firmware 3
• Dgnwg03lm Firmware 3
• Mccgq01lm Firmware 3
• Miwifi Os 3
• Redmi 6 Firmware 3
• Rtcgq01lm Firmware 3
• Xiaomi 3
• Xiaomi Router Ax3200 Firmware 3
• Zncz03lm Firmware 3
• Ax9000 Firmware 2
• Getapps 2
• Mi6 Browser 2
• App Store 2
• Millet Router 3g Firmware 2
• Miui Firmware 2
• Mix 2s Firmware 2
• Redmi Ax6s Firmware 2
• Redmi Note 6 Pro Firmware 2
• Wsdcgq01lm Firmware 2
• Xiaomi 13 Pro Firmware 2
• Xiaomi R3d Firmware 2
• Xiaomi Router Firmware 2
• Xiaomi Xiaoai Speaker Pro Lx06 Firmware 2

Newest

• xiaomi router ax9000, mi ax9000 firmware +1 more Xiaomi Router AX9000 has a post-authorization command injection vulnerability CVE-2024-45348 6.4 MediumSeptember 23, 2024
• mi getapps, xiaomi getapps application +1 more GetApps application has code execution vulnerability CVE-2023-26322 8.8 HighAugust 28, 2024
• mi app market Xiaomi App Market has a code execution vulnerability CVE-2023-26323 7.6 HighAugust 28, 2024
• mi file manager, xiaomi file manager app international version +1 more The international version of Xiaomi File Manager has a path traversal vulnerability CVE-2023-26321 6.3 MediumAugust 28, 2024
• mi getapps, xiaomi getapps application +1 more GetApps application has code execution vulnerability CVE-2023-26324 8.8 HighAugust 28, 2024
• xiaomi router ax9000, mi ax9000 firmware +1 more Xiaomi router has a command injection vulnerability after authorization CVE-2023-26315 EPSS 19.4% 6.5 MediumAugust 26, 2024
• mi redmi ax6s firmware Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same... CVE-2024-37664 5.2 MediumJune 17, 2024
• mi redmi ax6s firmware Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in... CVE-2024-37663 4.1 MediumJune 17, 2024
• belkin ax1800, mi ax1800 firmware, tp-link archer ax21 firmware +2 more TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability CVE-2023-27346 8.8 HighMay 3, 2024
• xiaomi pro 13, mi xiaomi 13 pro firmware +1 more Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability CVE-2024-4406 Public exploit 8.8 HighMay 2, 2024
• xiaomi pro 13, mi xiaomi 13 pro firmware +1 more Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability CVE-2024-4405 8.8 HighMay 2, 2024
• xiaomi router, mi xiaomi router ax3200 firmware +1 more Xiaomi Router external request interface vulnerability leads to stack overflow CVE-2023-26320 7.5 HighOctober 11, 2023
• xiaomi router, mi xiaomi router ax3200 firmware +1 more Xiaomi Router administration interface vulnerability leads command injection and stack overflow CVE-2023-26319 6.7 MediumOctober 11, 2023
• xiaomi router, mi xiaomi router ax3200 firmware +1 more Xiaomi router web interface post-authorization stack overflow CVE-2023-26318 6.7 MediumOctober 11, 2023
• xiaomi router, mi xiaomi router firmware +1 more Xiaomi router external request interface has command injection CVE-2023-26317 7.0 HighAugust 2, 2023
• mi xiaomi cloud A XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is... CVE-2023-26316 6.1 MediumAugust 2, 2023
• mi xiaomi router firmware When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal... CVE-2020-14140 7.5 HighMarch 29, 2023
• mi xiaomi The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time,... CVE-2020-14131 9.8 CriticalOctober 11, 2022
• mi xiaomi A logic vulnerability exists in a Xiaomi product. The vulnerability is caused by an identity... CVE-2020-14129 9.8 CriticalOctober 11, 2022
• mi smarthome information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is... CVE-2020-14114 7.5 HighJuly 22, 2022
• mi sound Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by... CVE-2020-14126 7.5 HighJuly 22, 2022
• mi miui A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is... CVE-2020-14127 7.5 HighJuly 14, 2022
• mi xiaomi lamp 1 firmware Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows... CVE-2022-31277 8.8 HighJune 16, 2022
• mi miui A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is... CVE-2020-14125 7.5 HighJune 8, 2022
• mi miui There is a pointer double free vulnerability in Some MIUI Services. When a function is called,... CVE-2020-14123 7.5 HighApril 22, 2022
• mi content center A improper permission configuration vulnerability in Xiaomi Content Center APP. This... CVE-2020-14117 5.3 MediumApril 21, 2022
• mi app store An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by... CVE-2020-14118 6.1 MediumApril 21, 2022
• mi miui Some Xiaomi models have a vulnerability in a certain application. The vulnerability is caused by... CVE-2020-14120 8.8 HighApril 21, 2022
• mi miui Some Xiaomi phones have information leakage vulnerabilities, and some of them may be able to... CVE-2020-14122 5.5 MediumApril 21, 2022
• mi app store A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete... CVE-2020-14121 5.5 MediumApril 21, 2022
• mi browser An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by... CVE-2020-14116 7.5 HighApril 21, 2022
• mi ax3600 firmware A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused... CVE-2020-14115 9.8 CriticalMarch 7, 2022
• mi ax3600 firmware A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused... CVE-2020-14111 7.8 HighMarch 7, 2022
• mi ax6000 firmware Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by... CVE-2020-14112 5.3 MediumMarch 7, 2022
• mi xiaomi mirror screen A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN. CVE-2020-14107 7.5 HighJanuary 18, 2022
• mi ax3600 firmware AX3600 router sensitive information leaked.There is an unauthorized interface through luci to... CVE-2020-14110 7.8 HighJanuary 18, 2022
• mi ax3600 firmware There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code... CVE-2020-14124 9.8 CriticalSeptember 16, 2021
• mi ax3600 There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command... CVE-2020-14119 9.8 CriticalSeptember 16, 2021
• mi ax3600 firmware There is command injection in the meshd program in the routing system, resulting in command... CVE-2020-14109 7.2 HighSeptember 16, 2021
• mi xiaomi Some js interfaces in the Xiaomi community were exposed, causing sensitive functions to be... CVE-2020-14130 5.3 MediumSeptember 16, 2021
• bluetrum ab5376t firmware, bt8896a firmware, mi true wireless earbuds basic 2 firmware +2 more The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of... CVE-2021-31610 6.5 MediumSeptember 7, 2021
• mi miui The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI <... CVE-2020-14105 5.5 MediumApril 20, 2021
• mi miui The application in the mobile phone can unauthorized access to the list of running processes in... CVE-2020-14106 5.5 MediumApril 8, 2021
• mi miui The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI <... CVE-2020-14103 5.5 MediumApril 8, 2021
• mi ax1800 firmware, rm1800 firmware +1 more On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption... CVE-2020-14099 7.5 HighApril 8, 2021
• mi ax3600 firmware A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM... CVE-2020-14104 8.1 HighApril 8, 2021
• mi ax1800 firmware, rm1800 firmware +1 more There is command injection when ddns processes the hostname, which causes the administrator user... CVE-2020-14102 7.2 HighJanuary 13, 2021
• mi ax1800 firmware, rm1800 firmware +1 more The login verification can be bypassed by using the problem that the time is not synchronized... CVE-2020-14098 7.5 HighJanuary 13, 2021
• mi redmi ax6 firmware Wrong nginx configuration, causing specific paths to be downloaded without authorization. This... CVE-2020-14097 7.5 HighJanuary 13, 2021
• mi ax1800 firmware, rm1800 firmware +1 more The data collection SDK of the router web management interface caused the leakage of the token.... CVE-2020-14101 7.5 HighJanuary 13, 2021
• Show olderLoading…