Vendors / Mi Records 101 All Threatist records
Exploited (KEV) 1
CVSS critical 23
CVSS high 40
Exploited now Mi records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority LOW 35
There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router.
CVSS 3.1 HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01907 · Published 2021-01-13 · No fix listed CWE-77
Priority LOW 35
The data collection SDK of the router web management interface caused the leakage of the token.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01071 · Published 2021-01-13 · No fix listed
Priority LOW 35
The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01238 · Published 2021-01-13 · No fix listed CWE-662
Priority LOW 34
On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00594 · Published 2021-04-08 · No fix listed CWE-798
Open these records in search → All records by CVSS severity
23 40 31 7 0
THREATIST.IORead the docs