Skip to content
Mi Xiaomi vulnerabilities
-
xiaomi pro 13, mi xiaomi 13 pro firmware +1 more
Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability
CVE-2024-4406
Public exploit
8.8 High
-
xiaomi pro 13, mi xiaomi 13 pro firmware +1 more
Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability
CVE-2024-4405
8.8 High
-
xiaomi router, mi xiaomi router ax3200 firmware +1 more
Xiaomi Router external request interface vulnerability leads to stack overflow
CVE-2023-26320
7.5 High
-
xiaomi router, mi xiaomi router ax3200 firmware +1 more
Xiaomi Router administration interface vulnerability leads command injection and stack overflow
CVE-2023-26319
6.7 Medium
-
xiaomi router, mi xiaomi router ax3200 firmware +1 more
Xiaomi router web interface post-authorization stack overflow
CVE-2023-26318
6.7 Medium
-
xiaomi router, mi xiaomi router firmware +1 more
Xiaomi router external request interface has command injection
CVE-2023-26317
7.0 High
-
mi xiaomi cloud
A XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is...
CVE-2023-26316
6.1 Medium
-
mi xiaomi router firmware
When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal...
CVE-2020-14140
7.5 High
-
mi xiaomi
The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time,...
CVE-2020-14131
9.8 Critical
-
mi xiaomi
A logic vulnerability exists in a Xiaomi product. The vulnerability is caused by an identity...
CVE-2020-14129
9.8 Critical
-
mi xiaomi lamp 1 firmware
Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows...
CVE-2022-31277
8.8 High
-
mi xiaomi mirror screen
A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN.
CVE-2020-14107
7.5 High
-
mi xiaomi
Some js interfaces in the Xiaomi community were exposed, causing sensitive functions to be...
CVE-2020-14130
5.3 Medium
-
mi xiaomi ai speaker firmware
Memory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker verifying a...
CVE-2020-14096
9.8 Critical
-
mi xiaomi r3600 firmware
Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an...
CVE-2020-11961
7.5 High
-
mi xiaomi r3600 firmware
Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in...
CVE-2020-11960
9.8 Critical
-
mi xiaomi r3600 firmware
An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50.
CVE-2020-11959
7.5 High
-
xiaomi router r3600, mi xiaomi r3600 firmware +1 more
In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the...
CVE-2020-14094
9.8 Critical
-
xiaomi router r3600, mi xiaomi r3600 firmware +1 more
In Xiaomi router R3600, ROM version<1.0.20, a connect service suffers from an injection...
CVE-2020-14095
9.8 Critical
-
mi xiaomi xiaoai speaker pro lx06 firmware
An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.52.4. Attackers can get root shell by...
CVE-2020-10263
6.8 Medium
-
mi xiaomi xiaoai speaker pro lx06 firmware
An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.58.10. Attackers can activate the...
CVE-2020-10262
6.8 Medium
-
mi xiaomi millet firmware
A malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A...
CVE-2019-15843
7.4 High
-
mi xiaomi mi-a1 firmware
An issue was discovered on Xiaomi Mi A1 tissot_sprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE...
CVE-2018-18698
9.8 Critical
-
mi xiaomi miwifi xiaomi 55dd firmware
An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi_55DD Version 2.8.50...
CVE-2018-16307
7.5 High
-
mi xiaomi r3d firmware
OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem...
CVE-2018-14060
9.8 Critical
-
mi xiaomi r3, xiaomi r3c firmware, xiaomi r3d firmware +1 more +3 more
OS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P before 2...
CVE-2018-14010
9.8 Critical