Xiaomi vulnerabilities, page 2

28 vulnerabilities

Known vulnerabilities in Xiaomi products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 18 products.

7.2CVE-2023-26318mixiaomi_router_ax3200_firmware+1
EPSS score
0.59%
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers.8.1CVE-2023-26320mixiaomi_router_ax3200_firmware+1
EPSS score
1.14%
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.7.2CVE-2023-26319mixiaomi_router_ax3200_firmware+1
EPSS score
0.97%
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.8.8CVE-2023-26315miax9000_firmware+1
EPSS score
19.39%
The Xiaomi router AX9000 has a post-authentication command injection vulnerability. This vulnerability is caused by the lack of input filtering, allowing an attacker to exploit it to obtain root access to the device.9.8CVE-2023-26323miapp_market+1
EPSS score
0.58%
A code execution vulnerability exists in the Xiaomi App market product. The vulnerability is caused by unsafe configuration and can be exploited by attackers to execute arbitrary code.9.8CVE-2023-26322migetapps+1
EPSS score
0.78%
A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code.9.8CVE-2023-26324migetapps+1
EPSS score
0.64%
A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code.9.8CVE-2023-26317mixiaomi_router_firmware+1
EPSS score
1.11%
Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filtering of responses from external interfaces. Attackers can exploit this vulnerability to gain access to the router by hijacking the ISP or upper-layer routing.