Xiaomi Router vulnerabilities

4 vulnerabilities

Known vulnerabilities in Xiaomi Router, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2023-26318mixiaomi_router_ax3200_firmware+1
EPSS score
0.59%
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers.8.1CVE-2023-26320mixiaomi_router_ax3200_firmware+1
EPSS score
1.14%
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.7.2CVE-2023-26319mixiaomi_router_ax3200_firmware+1
EPSS score
0.97%
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.9.8CVE-2023-26317mixiaomi_router_firmware+1
EPSS score
1.11%
Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filtering of responses from external interfaces. Attackers can exploit this vulnerability to gain access to the router by hijacking the ISP or upper-layer routing.