Mi vulnerabilities
101 vulnerabilities
Known vulnerabilities in Mi products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 80 products.
Products
50 of 80- Miui10 vulnerabilities
- Ax36007 vulnerabilities
- Xiaomi R36005 vulnerabilities
- Ax18004 vulnerabilities
- Mi Browser4 vulnerabilities
- Rm18004 vulnerabilities
- A2 Lite3 vulnerabilities
- Dgnwg03Lm3 vulnerabilities
- Mccgq01Lm3 vulnerabilities
- Miwifi Os3 vulnerabilities
- Redmi 63 vulnerabilities
- Rtcgq01Lm3 vulnerabilities
- Xiaomi3 vulnerabilities
- Xiaomi Router Ax32003 vulnerabilities
- Zncz03Lm3 vulnerabilities
- Ax90002 vulnerabilities
- Getapps2 vulnerabilities
- Mi App Store2 vulnerabilities
- Mi6 Browser2 vulnerabilities
- Millet Router 3G2 vulnerabilities
- Mix 2S2 vulnerabilities
- Redmi Ax6S2 vulnerabilities
- Redmi Note 6 Pro2 vulnerabilities
- Wsdcgq01Lm2 vulnerabilities
- Xiaomi 13 Pro2 vulnerabilities
- Xiaomi R3D2 vulnerabilities
- Xiaomi Router2 vulnerabilities
- Xiaomi Xiaoai Speaker Pro Lx062 vulnerabilities
- 5S Plus1 vulnerabilities
- A31 vulnerabilities
- App Market1 vulnerabilities
- Ax60001 vulnerabilities
- Cepheus1 vulnerabilities
- Content Center1 vulnerabilities
- File Manager1 vulnerabilities
- M3651 vulnerabilities
- Mdz 25 Dt1 vulnerabilities
- Mi 5S1 vulnerabilities
- Mi 5S Plus1 vulnerabilities
- Mi A2 Lite1 vulnerabilities
- Mi Mix 21 vulnerabilities
- Mi True Wireless Earbuds Basic 21 vulnerabilities
- Mijia Inkjet Printer1 vulnerabilities
- Mint Browser1 vulnerabilities
- Mix1 vulnerabilities
- Note 21 vulnerabilities
- Pad 41 vulnerabilities
- R36001 vulnerabilities
- Redmi 4A1 vulnerabilities
- Redmi 51 vulnerabilities
CVE-2018-16307mixiaomi_miwifi_xiaomi_55dd_firmware
EPSS score1.97%
An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi_55DD Version 2.8.50 devices. It is possible to induce the application to retrieve the contents of an arbitrary external URL and return those contents in its own response. If a domain name (containing a random string) is used in the HTTP Host header, the application performs an HTTP request to the specified domain. The response from that request is then included in the application's own response.CVE-2018-16130mimiwifi_osEPSS score23.96%
System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the "payload" URL parameter.CVE-2018-13022mimiwifi_osEPSS score0.69%
Cross-site scripting vulnerability in the API 404 page on Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary JavaScript via a modified URL path.CVE-2018-13023mimiwifi_osEPSS score23.96%
System command injection vulnerability in wifi_access in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via the "timeout" URL parameter.CVE-2018-19939mimi_a2_lite_firmware+1EPSS score1.28%
The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtp_read_Color in drivers/input/touchscreen/gt917d/gt9xx.c.CVE-2018-20523miredmi_4a_firmware+18EPSS score10.01%
Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other words, a third-party application can read the user's cleartext browser history via an app.provider.query content://com.android.browser.searchhistory/searchhistory request.CVE-2018-20823mimi_5s_firmwareEPSS score1.48%
The gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service (resonance and false data) via a 20.4 kHz audio signal, aka a MEMS ultrasound attack.CVE-2018-14010mixiaomi_r3+3EPSS score4.52%
OS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P before 2.14.5, R3C before 2.12.15, R3 before 2.22.15, and R3D before 2.26.4 devices allows an attacker to execute any command via crafted JSON data.CVE-2018-14060mixiaomi_r3d_firmwareEPSS score4.52%
OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D before 2.26.4 devices allows an attacker to execute any command via crafted JSON data.CVE-2018-18698mixiaomi_mi-a1_firmwareEPSS score1.08%
An issue was discovered on Xiaomi Mi A1 tissot_sprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot.CVE-2018-6065ubuntuchromium-browser+8KEVEPSS score60.30%
Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.CVE-2021-31610bluetrumab5376t_firmware+2EPSS score0.56%
The Bluetooth Classic implementation on AB32VG1 devices does not properly handle the reception of continuous unsolicited LMP responses, allowing attackers in radio range to trigger a denial of service (either restart or deadlock the device) by flooding a device with LMP_AU_rand data.CVE-2020-11961mixiaomi_r3600_firmwareEPSS score1.15%
Xiaomi router R3600 ROM before 1.0.50 is affected by a sensitive information leakage caused by an insecure interface get_config_result without authenticationCVE-2020-11960mixiaomi_r3600_firmwareEPSS score1.43%
Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface let attacker able to extract malicious file under any location in /tmp, lead to possible RCE and DoSCVE-2020-11959mixiaomi_r3600_firmwareEPSS score1.40%
An unsafe configuration of nginx lead to information leak in Xiaomi router R3600 ROM before 1.0.50.CVE-2020-9530mimiuiEPSS score1.48%
An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetApps(com.xiaomi.mipicks) mishandles the functionality of opening other components. Attackers need to induce users to open specific web pages in a specific network environment. By jumping to the WebView component of Messaging(com.android.MMS) and loading malicious web pages, information leakage can occur. This is fixed on version: 2001122; 11.0.1.54.CVE-2020-9531mimiuiEPSS score1.30%
An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. In the Web resources of GetApps(com.xiaomi.mipicks), the parameters passed in are read and executed. After reading the resource files, relevant components open the link of the incoming URL. Although the URL is safe and can pass security detection, the data carried in the parameters are loaded and executed. An attacker can use NFC tools to get close enough to a user's unlocked phone to cause apps to be installed and information to be leaked. This is fixed on version: 2001122.CVE-2020-14125mimiuiEPSS score7.49%
A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service.CVE-2020-14130mixiaomiEPSS score0.71%
Some js interfaces in the Xiaomi community were exposed, causing sensitive functions to be maliciously called on Xiaomi community app Affected Version <3.0.210809CVE-2020-14104miax3600_firmwareEPSS score0.66%
A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50.