Mi Ax1800_firmware
4 CVEs affecting Mi Ax1800_firmware. Latest disclosed: 2021-04-08. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-14099 | High | 7.5 | 2021-04-08 | On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can… |
CVE-2020-14101 | High | 7.5 | 2021-01-13 | The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiao… |
CVE-2020-14098 | High | 7.5 | 2021-01-13 | The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom v… |
CVE-2020-14102 | High | 7.2 | 2021-01-13 | There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaom… |