High severity · published Jan 13, 2021
CVE-2020-14102
There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router
7.2
CVSS
1.9%
EPSS
No
On KEV
Description
There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AF
Ax1800 Firmware · MI
before 1.0.336 · source: NVD
RF
Rm1800 Firmware · MI
before 1.0.26 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-14102
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-14102
Vendor Advisory
https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=23&locale=en
More from Ax1800 Firmware
7.5
CVE-2020-14099
On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive…
7.5
CVE-2020-14101
The data collection SDK of the router web management interface caused the leakage of the token
7.5
CVE-2020-14098
The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts