Mi Rm1800 vulnerabilities
4 vulnerabilities
Known vulnerabilities in Mi Rm1800, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-14099miax1800_firmware+1
EPSS score0.60%
On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password.CVE-2020-14102miax1800_firmware+1EPSS score1.91%
There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.CVE-2020-14098miax1800_firmware+1EPSS score1.24%
The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.CVE-2020-14101miax1800_firmware+1EPSS score1.07%
The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.