MI
Vendor
MI
139
CVEs
1
On KEV
0
New 30D
Products
MB8.8
Mi6 Browser
MI
2 CVEs1 on KEV0 new
MI8.8
Miui
MI
8 CVEs0 on KEV0 new
AF9.8
Ax3600 Firmware
MI
6 CVEs0 on KEV0 new
XR9.8
Xiaomi R3600 Firmware
MI
5 CVEs0 on KEV0 new
AF7.5
Ax1800 Firmware
MI
4 CVEs0 on KEV0 new
MB8.8
MI Browser
MI
4 CVEs0 on KEV0 new
RF7.5
Rm1800 Firmware
MI
4 CVEs0 on KEV0 new
AL5.5
A2 Lite Firmware
MI
3 CVEs0 on KEV0 new
DF9.8
Dgnwg03lm Firmware
MI
3 CVEs0 on KEV0 new
MF9.8
Mccgq01lm Firmware
MI
3 CVEs0 on KEV0 new
MO8.8
Miwifi OS
MI
3 CVEs0 on KEV0 new
R67.5
Redmi 6 Firmware
MI
3 CVEs0 on KEV0 new
RF9.8
Rtcgq01lm Firmware
MI
3 CVEs0 on KEV0 new
XI9.8
Xiaomi
MI
3 CVEs0 on KEV0 new
XR8.1
Xiaomi Router Ax3200 Firmware
MI
3 CVEs0 on KEV0 new
ZF9.8
Zncz03lm Firmware
MI
3 CVEs0 on KEV0 new
AF8.8
Ax9000 Firmware
MI
2 CVEs0 on KEV0 new
GE9.8
Getapps
MI
2 CVEs0 on KEV0 new
MA6.1
MI App Store
MI
2 CVEs0 on KEV0 new
MR9.8
Millet Router 3g Firmware
MI
2 CVEs0 on KEV0 new
MF7.3
Miui Firmware
MI
2 CVEs0 on KEV0 new
M25.5
Mix 2s Firmware
MI
2 CVEs0 on KEV0 new
RA5.2
Redmi Ax6s Firmware
MI
2 CVEs0 on KEV0 new
RN5.5
Redmi Note 6 Pro Firmware
MI
2 CVEs0 on KEV0 new
WF9.8
Wsdcgq01lm Firmware
MI
2 CVEs0 on KEV0 new
X19.6
Xiaomi 13 Pro Firmware
MI
2 CVEs0 on KEV0 new
XR9.8
Xiaomi R3d Firmware
MI
2 CVEs0 on KEV0 new
XR9.8
Xiaomi Router Firmware
MI
2 CVEs0 on KEV0 new
XX6.8
Xiaomi Xiaoai Speaker Pro Lx06 Firmware
MI
2 CVEs0 on KEV0 new
5P3.3
5s Plus Firmware
MI
1 CVEs0 on KEV0 new
AF5.5
A3 Firmware
MI
1 CVEs0 on KEV0 new
AM9.8
App Market
MI
1 CVEs0 on KEV0 new
AX9.8
Ax3600
MI
1 CVEs0 on KEV0 new
AF5.3
Ax6000 Firmware
MI
1 CVEs0 on KEV0 new
CF5.5
Cepheus Firmware
MI
1 CVEs0 on KEV0 new
CC5.3
Content Center
MI
1 CVEs0 on KEV0 new
FM9.8
File Manager
MI
1 CVEs0 on KEV0 new
MF6.5
M365 Firmware
MI
1 CVEs0 on KEV0 new
MF6.8
Mdz-25-dt Firmware
MI
1 CVEs0 on KEV0 new
M57.5
MI 5s Firmware
MI
1 CVEs0 on KEV0 new
M54.2
MI 5s Plus Firmware
MI
1 CVEs0 on KEV0 new
MA7.5
MI A2 Lite Firmware
MI
1 CVEs0 on KEV0 new
MM5.5
MI Mix 2 Firmware
MI
1 CVEs0 on KEV0 new
MT6.5
MI True Wireless Earbuds Basic 2 Firmware
MI
1 CVEs0 on KEV0 new
MI9.8
Mijia Inkjet Printer Firmware
MI
1 CVEs0 on KEV0 new
MB6.5
Mint Browser
MI
1 CVEs0 on KEV0 new
MF3.3
Mix Firmware
MI
1 CVEs0 on KEV0 new
N23.3
Note 2 Firmware
MI
1 CVEs0 on KEV0 new
P45.5
Pad 4 Firmware
MI
1 CVEs0 on KEV0 new
RF9.8
R3600 Firmware
MI
1 CVEs0 on KEV0 new
R45.3
Redmi 4a Firmware
MI
1 CVEs0 on KEV0 new
R53.3
Redmi 5 Firmware
MI
1 CVEs0 on KEV0 new
R55.3
Redmi 5 Plus Firmware
MI
1 CVEs0 on KEV0 new
R63.3
Redmi 6 Pro Firmware
MI
1 CVEs0 on KEV0 new
R65.3
Redmi 6a Firmware
MI
1 CVEs0 on KEV0 new
R75.3
Redmi 7 Firmware
MI
1 CVEs0 on KEV0 new
R75.3
Redmi 7a Firmware
MI
1 CVEs0 on KEV0 new
RA7.5
Redmi Ax6 Firmware
MI
1 CVEs0 on KEV0 new
RG5.3
Redmi GO Firmware
MI
1 CVEs0 on KEV0 new
RK5.3
Redmi K20 Firmware
MI
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-45348 | AF Ax9000 Firmware MI | 8.8 | Sep 23 | Xiaomi Router AX9000 has a post-authorization command injection vulnerability |
| CVE-2023-26324 | GE Getapps MI | 9.8 | Aug 28 | A code execution vulnerability exists in the XiaomiGetApps application product |
| CVE-2023-26323 | AM App Market MI | 9.8 | Aug 28 | A code execution vulnerability exists in the Xiaomi App market product |
| CVE-2023-26322 | GE Getapps MI | 9.8 | Aug 28 | A code execution vulnerability exists in the XiaomiGetApps application product |
| CVE-2023-26321 | FM File Manager MI | 9.8 | Aug 28 | A path traversal vulnerability exists in the Xiaomi File Manager application product(international version) |
| CVE-2023-26315 | AF Ax9000 Firmware MI | 8.8 | Aug 26 | The Xiaomi router AX9000 has a post-authentication command injection vulnerability |
| CVE-2024-37664 | RA Redmi Ax6s Firmware MI | 5.2 | Jun 17 | Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks |
| CVE-2024-37663 | RA Redmi Ax6s Firmware MI | 4.1 | Jun 17 | Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks |
| CVE-2024-4406 | X1 Xiaomi 13 Pro Firmware MI | 9.6 | May 2 | Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability |
| CVE-2024-4405 | X1 Xiaomi 13 Pro Firmware MI | 9.6 | May 2 | Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability |
| CVE-2023-26320 | XR Xiaomi Router Ax3200 Firmware MI | 8.1 | Oct 11 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection |
| CVE-2023-26319 | XR Xiaomi Router Ax3200 Firmware MI | 7.2 | Oct 11 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection |
| CVE-2023-26318 | XR Xiaomi Router Ax3200 Firmware MI | 7.2 | Oct 11 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers |
| CVE-2023-26317 | XR Xiaomi Router Firmware MI | 9.8 | Aug 2 | Xiaomi routers have an external interface that can lead to command injection |
| CVE-2023-26316 | XC Xiaomi Cloud MI | 6.1 | Aug 2 | A XSS vulnerability exists in the Xiaomi cloud service Application product |
| CVE-2020-14140 | XR Xiaomi Router Firmware MI | 7.5 | Mar 29 | When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerability |
| CVE-2020-14131 | XI Xiaomi MI | 9.8 | Oct 11 | The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and professional security experts and security… |
| CVE-2020-14129 | XI Xiaomi MI | 9.8 | Oct 11 | A logic vulnerability exists in a Xiaomi product |
| CVE-2020-14126 | SO Sound MI | 7.5 | Jul 22 | Information leakage vulnerability exists in the Mi Sound APP |
| CVE-2020-14114 | SM Smarthome MI | 7.5 | Jul 22 | information leakage vulnerability exists in the Xiaomi SmartHome APP |
| CVE-2020-14127 | MI Miui MI | 7.5 | Jul 14 | A denial of service vulnerability exists in some Xiaomi models of phones |
| CVE-2022-31277 | XL Xiaomi Lamp 1 Firmware MI | 8.8 | Jun 16 | Xiaomi Lamp 1 v2.0.4_0066 was discovered to be vulnerable to replay attacks |
| CVE-2020-14125 | MI Miui MI | 7.5 | Jun 8 | A denial of service vulnerability exists in some Xiaomi models of phones |
| CVE-2020-14123 | MI Miui MI | 7.5 | Apr 22 | There is a pointer double free vulnerability in Some MIUI Services |
| CVE-2020-14122 | MI Miui MI | 5.5 | Apr 21 | Some Xiaomi phones have information leakage vulnerabilities, and some of them may be able to forge a specific identity due to the lack of parameter verification, resulting in user… |
| CVE-2020-14121 | MA MI App Store MI | 5.5 | Apr 21 | A business logic vulnerability exists in Mi App Store |
| CVE-2020-14120 | MI Miui MI | 8.8 | Apr 21 | Some Xiaomi models have a vulnerability in a certain application |
| CVE-2020-14118 | MA MI App Store MI | 6.1 | Apr 21 | An intent redirection vulnerability in the Mi App Store product |
| CVE-2020-14117 | CC Content Center MI | 5.3 | Apr 21 | A improper permission configuration vulnerability in Xiaomi Content Center APP |
| CVE-2020-14116 | MB MI Browser MI | 7.5 | Apr 21 | An intent redirection vulnerability in the Mi Browser product |
| CVE-2020-14115 | AF Ax3600 Firmware MI | 9.8 | Mar 10 | A command injection vulnerability exists in the Xiaomi Router AX3600 |
| CVE-2020-14112 | AF Ax6000 Firmware MI | 5.3 | Mar 10 | Information Leak Vulnerability exists in the Xiaomi Router AX6000 |
| CVE-2020-14111 | AF Ax3600 Firmware MI | 7.8 | Mar 10 | A command injection vulnerability exists in the Xiaomi Router AX3600 |
| CVE-2020-14110 | AF Ax3600 Firmware MI | 7.8 | Jan 18 | AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive information and log in to the web background |
| CVE-2020-14107 | XM Xiaomi Mirror Screen MI | 7.5 | Jan 18 | A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN |
| CVE-2020-14124 | AF Ax3600 Firmware MI | 9.8 | Sep 16 | There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM version =rom< 1.1.12 |
| CVE-2020-14119 | AX Ax3600 MI | 9.8 | Sep 16 | There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom… |
| CVE-2020-14130 | XI Xiaomi MI | 5.3 | Sep 16 | Some js interfaces in the Xiaomi community were exposed, causing sensitive functions to be maliciously called on Xiaomi community app Affected Version <3.0.210809 |
| CVE-2020-14109 | AF Ax3600 Firmware MI | 7.2 | Sep 16 | There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version =<… |
| CVE-2021-31610 | MT MI True Wireless Earbuds Basic 2 Firmware MI | 6.5 | Sep 7 | The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to… |
| CVE-2020-14105 | MI Miui MI | 5.5 | Apr 20 | The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15 |
| CVE-2020-14106 | MI Miui MI | 5.5 | Apr 8 | The application in the mobile phone can unauthorized access to the list of running processes in the mobile phone, Xiaomi Mobile Phone MIUI < 2021.01.26 |
| CVE-2020-14103 | MI Miui MI | 5.5 | Apr 8 | The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15 |
| CVE-2020-14104 | AF Ax3600 Firmware MI | 8.1 | Apr 8 | A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50 |
| CVE-2020-14099 | AF Ax1800 Firmware MI | 7.5 | Apr 8 | On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive… |
| CVE-2020-14102 | AF Ax1800 Firmware MI | 7.2 | Jan 13 | There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router |
| CVE-2020-14101 | AF Ax1800 Firmware MI | 7.5 | Jan 13 | The data collection SDK of the router web management interface caused the leakage of the token |
| CVE-2020-14098 | AF Ax1800 Firmware MI | 7.5 | Jan 13 | The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts |
| CVE-2020-14097 | RA Redmi Ax6 Firmware MI | 7.5 | Jan 13 | Wrong nginx configuration, causing specific paths to be downloaded without authorization |
| CVE-2020-14100 | RF R3600 Firmware MI | 9.8 | Sep 11 | In Xiaomi router R3600 ROM version<1.0.66, filters in the set_WAN6 interface can be bypassed, causing remote code execution |
| CVE-2020-14096 | XA Xiaomi AI Speaker Firmware MI | 9.8 | Sep 11 | Memory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker verifying a malicious firmware during OTA process |
| CVE-2020-11961 | XR Xiaomi R3600 Firmware MI | 7.5 | Jun 24 | Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface get_config_result without authentication |
| CVE-2020-11960 | XR Xiaomi R3600 Firmware MI | 9.8 | Jun 24 | Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface let attacker able to extract malicious file under any location… |
| CVE-2020-11959 | XR Xiaomi R3600 Firmware MI | 7.5 | Jun 24 | An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50 |
| CVE-2020-10561 | MI Mijia Inkjet Printer Firmware MI | 9.8 | Jun 24 | An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3.4.6_0138 |
| CVE-2020-14095 | XR Xiaomi R3600 Firmware MI | 9.8 | Jun 24 | In Xiaomi router R3600, ROM version<1.0.20, a connect service suffers from an injection vulnerability through the web interface, leading to a stack overflow or remote code… |
| CVE-2020-14094 | XR Xiaomi R3600 Firmware MI | 9.8 | Jun 24 | In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or remote code execution |
| CVE-2020-10263 | XX Xiaomi Xiaoai Speaker Pro Lx06 Firmware MI | 6.8 | Apr 8 | An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.52.4 |
| CVE-2020-10262 | XX Xiaomi Xiaoai Speaker Pro Lx06 Firmware MI | 6.8 | Apr 8 | An issue was discovered on XIAOMI XIAOAI speaker Pro LX06 1.58.10 |
| CVE-2020-9531 | MF Miui Firmware MI | 7.3 | Mar 6 | An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices |