Mi
101 CVEs across 148 Mi products. Browse Mi vulnerabilities, severities, and proof-of-concept exploits.
Mi products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-45348 | Medium | 6.4 | 2024-09-23 | Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack of validation of user input, and an att… |
CVE-2023-26324 | High | 8.8 | 2024-08-28 | A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an a… |
CVE-2023-26323 | High | 7.6 | 2024-08-28 | A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploited by attackers t… |
CVE-2023-26322 | High | 8.8 | 2024-08-28 | A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an a… |
CVE-2023-26321 | Medium | 6.3 | 2024-08-28 | A path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by unfiltered special… |
CVE-2023-26315 | Medium | 6.5 | 2024-08-26 | The Xiaomi router AX9000 has a post-authentication command injection vulnerability. This vulnerability is caused by the lack of input filtering, allowing an at… |
CVE-2024-37664 | Medium | 5.2 | 2024-06-17 | Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks. An attacker in the same WLAN as the victim can disconnect or hijack the traffic betwee… |
CVE-2024-37663 | Medium | 4.1 | 2024-06-17 | Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks. An attacker in the same WLAN as the victim can hijack the traffic between the… |
CVE-2024-4406 | Critical | 9.6 | 2024-05-02 | Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… |
CVE-2024-4405 | Critical | 9.6 | 2024-05-02 | Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… |
CVE-2023-26320 | High | 7.5 | 2023-10-11 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection. |
CVE-2023-26319 | Medium | 6.7 | 2023-10-11 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection. |
CVE-2023-26318 | Medium | 6.7 | 2023-10-11 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers. |
CVE-2023-26317 | High | 7.0 | 2023-08-02 | Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filtering of responses from external interface… |
CVE-2023-26316 | Medium | 6.1 | 2023-08-02 | A XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is caused by Webview's whitelist checking function allowing javas… |
CVE-2020-14140 | High | 7.5 | 2023-03-29 | When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerability. This vulnerability is caused by th… |
CVE-2020-14131 | Critical | 9.8 | 2022-10-11 | The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and professional security expe… |
CVE-2020-14129 | Critical | 9.8 | 2022-10-11 | A logic vulnerability exists in a Xiaomi product. The vulnerability is caused by an identity verification failure, which can be exploited by an attacker who ca… |
CVE-2020-14126 | High | 7.5 | 2022-07-22 | Information leakage vulnerability exists in the Mi Sound APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be explo… |
CVE-2020-14114 | High | 7.5 | 2022-07-22 | information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can… |
CVE-2020-14127 | High | 7.5 | 2022-07-14 | A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by heap overflow and can be exploited by attackers to mak… |
CVE-2022-31277 | High | 8.8 | 2022-06-16 | Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictions and gain contr… |
CVE-2020-14125 | High | 7.5 | 2022-06-08 | A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attack… |
CVE-2020-14123 | High | 7.5 | 2022-04-22 | There is a pointer double free vulnerability in Some MIUI Services. When a function is called, the memory pointer is copied to two function modules, and an att… |
CVE-2020-14122 | Medium | 5.5 | 2022-04-21 | Some Xiaomi phones have information leakage vulnerabilities, and some of them may be able to forge a specific identity due to the lack of parameter verificatio… |
CVE-2020-14121 | Medium | 5.5 | 2022-04-21 | A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of the products being bypassed, and an attac… |
CVE-2020-14120 | High | 8.8 | 2022-04-21 | Some Xiaomi models have a vulnerability in a certain application. The vulnerability is caused by the lack of checksum when using a three-party application to p… |
CVE-2020-14118 | Medium | 6.1 | 2022-04-21 | An intent redirection vulnerability in the Mi App Store product. This vulnerability is caused by the Mi App Store does not verify the validity of the incoming… |
CVE-2020-14117 | Medium | 5.3 | 2022-04-21 | A improper permission configuration vulnerability in Xiaomi Content Center APP. This vulnerability is caused by the lack of correct permission verification in… |
CVE-2020-14116 | High | 7.5 | 2022-04-21 | An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity of the incoming data… |
CVE-2020-14115 | Critical | 9.8 | 2022-03-10 | A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attacker… |
CVE-2020-14112 | Medium | 5.3 | 2022-03-10 | Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing configuration. Attackers can exploit this v… |
CVE-2020-14111 | High | 7.8 | 2022-03-10 | A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attacker… |
CVE-2020-14110 | High | 7.8 | 2022-01-18 | AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive information and log in to the web background. |
CVE-2020-14107 | High | 7.5 | 2022-01-18 | A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN. |
CVE-2020-14124 | Critical | 9.8 | 2021-09-16 | There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom< 1.1.12. |
CVE-2020-14119 | Critical | 9.8 | 2021-09-16 | There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX360… |
CVE-2020-14130 | Medium | 5.3 | 2021-09-16 | Some js interfaces in the Xiaomi community were exposed, causing sensitive functions to be maliciously called on Xiaomi community app Affected Version <3.0.210… |
CVE-2020-14109 | High | 7.2 | 2021-09-16 | There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 wit… |
CVE-2021-31610 | Medium | 6.5 | 2021-09-07 | The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in r… |
CVE-2020-14105 | Medium | 5.5 | 2021-04-20 | The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15. |
CVE-2020-14106 | Medium | 5.5 | 2021-04-08 | The application in the mobile phone can unauthorized access to the list of running processes in the mobile phone, Xiaomi Mobile Phone MIUI < 2021.01.26. |
CVE-2020-14103 | Medium | 5.5 | 2021-04-08 | The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15. |
CVE-2020-14104 | High | 8.1 | 2021-04-08 | A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50. |
CVE-2020-14099 | High | 7.5 | 2021-04-08 | On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can… |
CVE-2020-14102 | High | 7.2 | 2021-01-13 | There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaom… |
CVE-2020-14101 | High | 7.5 | 2021-01-13 | The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiao… |
CVE-2020-14098 | High | 7.5 | 2021-01-13 | The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom v… |
CVE-2020-14097 | High | 7.5 | 2021-01-13 | Wrong nginx configuration, causing specific paths to be downloaded without authorization. This affects Xiaomi router AX6 ROM version < 1.0.18. |
CVE-2020-14100 | Critical | 9.8 | 2020-09-11 | In Xiaomi router R3600 ROM version<1.0.66, filters in the set_WAN6 interface can be bypassed, causing remote code execution. The router administrator can gain… |
CVE-2020-14096 | Critical | 9.8 | 2020-09-11 | Memory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker verifying a malicious firmware during OTA process. |
CVE-2020-11961 | High | 7.5 | 2020-06-24 | Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface get_config_result without authentication |
CVE-2020-11960 | Critical | 9.8 | 2020-06-24 | Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface let attacker able to extract malicious fil… |
CVE-2020-11959 | High | 7.5 | 2020-06-24 | An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50. |
CVE-2020-10561 | Critical | 9.8 | 2020-06-24 | An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3.4.6_0138. Injecting parameters to ippserver through the web management background, resulting in co… |
CVE-2020-14095 | Critical | 9.8 | 2020-06-24 | In Xiaomi router R3600, ROM version<1.0.20, a connect service suffers from an injection vulnerability through the web interface, leading to a stack overflow or… |
CVE-2020-14094 | Critical | 9.8 | 2020-06-24 | In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or remote code execut… |
CVE-2020-10263 | Medium | 6.8 | 2020-04-08 | An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.52.4. Attackers can get root shell by accessing the UART interface and then they can (i) read Wi-Fi… |
CVE-2020-10262 | Medium | 6.8 | 2020-04-08 | An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.58.10. Attackers can activate the failsafe mode during the boot process, and use the mi_console com… |
CVE-2020-9531 | High | 7.3 | 2020-03-06 | An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. In the Web resources of GetApps(com.xiaomi.mipicks), the parameters passed in are read and ex… |
CVE-2020-9530 | Medium | 6.5 | 2020-03-06 | An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetApps(com.xiaomi.mipicks) mishandles the functionality of opening o… |
CVE-2020-8994 | Medium | 6.8 | 2020-03-05 | An issue was discovered on XIAOMI AI speaker MDZ-25-DT 1.34.36, and 1.40.14. Attackers can get root shell by accessing the UART interface and then they can rea… |
CVE-2019-13322 | High | 8.8 | 2020-02-10 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Browser Prior to 10.4.0. User interaction is require… |
CVE-2019-13321 | High | 8.0 | 2020-02-10 | This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xiaomi Browser Prior to 10.4.0. User interaction is… |
CVE-2019-15915 | High | 7.5 | 2019-12-20 | An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, RTCGQ01LM devices. Attackers can utilize the "discover ZigBee network procedure" to perform a… |
CVE-2019-15914 | High | 7.5 | 2019-12-20 | An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to… |
CVE-2019-15913 | Critical | 9.8 | 2019-12-20 | An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, cau… |
CVE-2019-15475 | Medium | 5.5 | 2019-11-14 | The Xiaomi Mi A3 Android device with a build fingerprint of xiaomi/onc_eea/onc:9/PKQ1.181021.001/V10.2.8.0.PFLEUXM:user/release-keys contains a pre-installed a… |
CVE-2019-15474 | Medium | 5.5 | 2019-11-14 | The Xiaomi Cepheus Android device with a build fingerprint of Xiaomi/cepheus/cepheus:9/PKQ1.181121.001/V10.2.6.0.PFAMIXM:user/release-keys contains a pre-insta… |
CVE-2019-15473 | Medium | 5.5 | 2019-11-14 | The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/jasmine/jasmine_sprout:9/PKQ1.180904.001/V10.0.2.0.PDIMIFJ:user/release-keys contains a… |
CVE-2019-15472 | Medium | 5.5 | 2019-11-14 | The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy_sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys contains a pre… |
CVE-2019-15471 | Medium | 5.5 | 2019-11-14 | The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys contains a pre… |
CVE-2019-15470 | Medium | 5.5 | 2019-11-14 | The Xiaomi Redmi Note 6 Pro Android device with a build fingerprint of xiaomi/tulip/tulip:8.1.0/OPM1.171019.011/V10.2.2.0.OEKMIXM:user/release-keys contains a… |
CVE-2019-15469 | Medium | 5.5 | 2019-11-14 | The Xiaomi Mi Pad 4 Android device with a build fingerprint of Xiaomi/clover/clover:8.1.0/OPM1.171019.019/V9.6.26.0.ODJCNFD:user/release-keys contains a pre-in… |
CVE-2019-15468 | Medium | 5.5 | 2019-11-14 | The Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy_sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys contains a pre… |
CVE-2019-15467 | Low | 3.3 | 2019-11-14 | The Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys contains a pre… |
CVE-2019-15466 | Low | 3.3 | 2019-11-14 | The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V10.2.6.0.ODMMIXM:user/release-keys co… |
CVE-2019-15428 | Low | 3.3 | 2019-11-14 | The Xiaomi Mi Note 2 Android device with a build fingerprint of Xiaomi/scorpio/scorpio:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app with a… |
CVE-2019-15427 | Low | 3.3 | 2019-11-14 | The Xiaomi Mi Mix Android device with a build fingerprint of Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app with a pa… |
CVE-2019-15426 | Low | 3.3 | 2019-11-14 | The Xiaomi 5S Plus Android device with a build fingerprint of Xiaomi/natrium/natrium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app with a p… |
CVE-2019-15415 | Low | 3.3 | 2019-11-14 | The Xiaomi Redmi 5 Android device with a build fingerprint of xiaomi/vince/vince:7.1.2/N2G47H/V9.5.4.0.NEGMIFA:user/release-keys contains a pre-installed app w… |
CVE-2019-15340 | Low | 3.3 | 2019-11-14 | The Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V9.6.4.0.ODMMIFD:user/release-keys con… |
CVE-2019-18371 | High | 7.5 | 2019-10-23 | An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerability to read arbitrary files via a misconf… |
CVE-2019-18370 | Critical | 9.8 | 2019-10-23 | An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. The backup file is in tar.gz format. After uploading, the application uses the tar… |
CVE-2019-15843 | High | 7.4 | 2019-09-18 | A malicious file upload vulnerability was discovered in Xiaomi Millet mobile phones 1-6.3.9.3. A particular condition involving a man-in-the-middle attack may… |
CVE-2018-20523 | Medium | 5.3 | 2019-06-07 | Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a third-part… |
CVE-2019-12762 | Medium | 4.2 | 2019-06-06 | Xiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal between 198 kHz and 203 kHz, as demonstrated by a transmitter and… |
CVE-2019-6743 | High | 8.8 | 2019-06-03 | This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Mi6 Browser prior to 10.4.0. User interaction is req… |
CVE-2019-12500 | Medium | 6.5 | 2019-05-31 | The Xiaomi M365 scooter 2019-02-12 before 1.5.1 allows spoofing of "suddenly accelerate" commands. This occurs because Bluetooth Low Energy commands have no se… |
CVE-2018-20823 | High | 7.5 | 2019-04-25 | The gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service (resonance and false data) via a 20.4 kHz audio signal, aka a MEMS ultrasou… |
CVE-2019-10875 | Medium | 6.5 | 2019-04-05 | A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MIUI native browser) and Mint Browser 1.5.3 due to… |
CVE-2019-8413 | Medium | 5.5 | 2019-02-17 | On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a… |
CVE-2018-18698 | Critical | 9.8 | 2018-12-24 | An issue was discovered on Xiaomi Mi A1 tissot_sprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the… |
CVE-2018-19939 | High | 7.5 | 2018-12-07 | The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08… |
CVE-2018-16130 | High | 8.8 | 2018-11-27 | System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the "payload" URL para… |
CVE-2018-13023 | High | 8.8 | 2018-11-27 | System command injection vulnerability in wifi_access in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via the "timeout" URL p… |
CVE-2018-13022 | Medium | 6.1 | 2018-11-27 | Cross-site scripting vulnerability in the API 404 page on Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary JavaScript via a modified UR… |
CVE-2018-6065 | High | 8.8 | 2018-11-14 | Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a r… |
CVE-2018-16307 | High | 7.5 | 2018-09-05 | An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi_55DD Version 2.8.50 devices. It is possible to induce the application to retrieve t… |
CVE-2018-14060 | Critical | 9.8 | 2018-07-15 | OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D before 2.26.4 devices allows an attacker to… |