Mi vulnerabilities, page 5
101 vulnerabilities
Known vulnerabilities in Mi products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 80 products.
MediumCVE-2019-15468mi · a2_lite_firmwaremi a2_lite_firmwareThe Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/daisy/daisy_sprout:9/PKQ1.180917.001/V10.0.3.0.PDLMIXM:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1, versionName=QL1715_201812071953) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.EPSS0.29%LowCVE-2019-15466mi · redmi_6_pro_firmwaremi redmi_6_pro_firmwareThe Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V10.2.6.0.ODMMIXM:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1, versionName=QL1715_201812191721) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.EPSS0.28%LowCVE-2019-15340mi · redmi_6_firmwaremi redmi_6_firmwareThe Xiaomi Redmi 6 Pro Android device with a build fingerprint of xiaomi/sakura_india/sakura_india:8.1.0/OPM1.171019.019/V9.6.4.0.ODMMIFD:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1, versionName=QL1715_201805292006) that allows any app co-located on the device to programmatically disable and enable Wi-Fi, Bluetooth, and GPS without the corresponding access permission through an exported interface.EPSS0.27%LowCVE-2019-15467mi · mix_2s_firmwaremi mix_2s_firmwareThe Xiaomi Mi Mix 2S Android device with a build fingerprint of Xiaomi/polaris/polaris:8.0.0/OPR1.170623.032/V9.5.19.0.ODGMIFA:user/release-keys contains a pre-installed app with a package name of com.huaqin.factory app (versionCode=1, versionName=A2060_201801032053) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.EPSS0.28%LowCVE-2019-15426mi · 5s_plus_firmwaremi 5s_plus_firmwareThe Xiaomi 5S Plus Android device with a build fingerprint of Xiaomi/natrium/natrium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app with a package name of com.miui.powerkeeper app (versionCode=40000, versionName=4.0.00) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.EPSS0.28%HighCVE-2019-15914mi · dgnwg03lm_firmware +4 moremi dgnwg03lm_firmwareAn issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Attackers can use the ZigBee trust center rejoin procedure to perform mutiple denial of service attacks.EPSS1.31%MediumCVE-2019-15473mi · a2_lite_firmwaremi a2_lite_firmwareThe Xiaomi Mi A2 Lite Android device with a build fingerprint of xiaomi/jasmine/jasmine_sprout:9/PKQ1.180904.001/V10.0.2.0.PDIMIFJ:user/release-keys contains a pre-installed app with a package name of com.qualcomm.qti.callenhancement app (versionCode=28, versionName=9) that allows unauthorized microphone audio recording via a confused deputy attack. This capability can be accessed by any app co-located on the device. This app allows a third-party app to use its open interface to record telephone calls to external storage.EPSS0.30%HighCVE-2019-6743mi · mi6_browser +1 moremi mi6_browserThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Mi6 Browser prior to 10.4.0. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WebAssembly.Instance method. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-7466.EPSS2.45%MediumCVE-2019-12500mi · m365_firmwaremi m365_firmwareThe Xiaomi M365 scooter 2019-02-12 before 1.5.1 allows spoofing of "suddenly accelerate" commands. This occurs because Bluetooth Low Energy commands have no server-side authentication check. Other affected commands include suddenly braking, locking, and unlocking.EPSS0.84%MediumCVE-2019-12762fujitsu · arrows_nx_f05-f_firmware +7 morefujitsu arrows_nx_f05-f_firmwareXiaomi Mi 5s Plus devices allow attackers to trigger touchscreen anomalies via a radio signal between 198 kHz and 203 kHz, as demonstrated by a transmitter and antenna hidden just beneath the surface of a coffee-shop table, aka Ghost Touch.EPSS0.18%MediumCVE-2019-8413mi · mi_mix_2_firmwaremi mi_mix_2_firmwareOn Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0 causes a system crash via IOCTL 0x4008c575 (aka decimal 1074316661).EPSS0.38%CriticalCVE-2023-26321mi · file_manager +1 moreThe international version of Xiaomi File Manager has a path traversal vulnerabilityA path traversal vulnerability exists in the Xiaomi File Manager application product(international version). The vulnerability is caused by unfiltered special characters and can be exploited by attackers to overwrite and execute code in the file.EPSS0.55%HighCVE-2023-26318mi · xiaomi_router_ax3200_firmware +1 moreXiaomi router web interface post-authorization stack overflowBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers.EPSS0.59%HighCVE-2023-26320mi · xiaomi_router_ax3200_firmware +1 moreXiaomi Router external request interface vulnerability leads to stack overflowImproper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.EPSS1.14%HighCVE-2023-26319mi · xiaomi_router_ax3200_firmware +1 moreXiaomi Router administration interface vulnerability leads command injection and stack overflowImproper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.EPSS0.97%HighCVE-2023-26315mi · ax9000_firmware +1 moreXiaomi router has a command injection vulnerability after authorizationThe Xiaomi router AX9000 has a post-authentication command injection vulnerability. This vulnerability is caused by the lack of input filtering, allowing an attacker to exploit it to obtain root access to the device.EPSS19.39%CriticalCVE-2023-26323mi · app_market +1 moreXiaomi App Market has a code execution vulnerabilityA code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploited by attackers to execute arbitrary code.EPSS0.58%CriticalCVE-2023-26322mi · getapps +1 moreGetApps application has code execution vulnerabilityA code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code.EPSS0.78%MediumCVE-2023-26316mi · xiaomi_cloudmi xiaomi_cloudA XSS vulnerability exists in the Xiaomi cloud service Application product. The vulnerability is caused by Webview's whitelist checking function allowing javascript protocol to be loaded and can be exploited by attackers to steal Xiaomi cloud service account's cookies.EPSS0.35%CriticalCVE-2023-26324mi · getapps +1 moreGetApps application has code execution vulnerabilityA code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code.EPSS0.64%