Lucene search

K
cvelistXiaomiCVELIST:CVE-2020-14099
HistoryApr 08, 2021 - 5:52 p.m.

CVE-2020-14099

2021-04-0817:52:45
Xiaomi
www.cve.org
1
xiaomi
router
encryption
vulnerability
sensitive information
password
backup files
hard-coded keys

EPSS

0.001

Percentile

43.6%

On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user’s backup files uses hard-coded keys, which can expose sensitive information such as a user’s password.

CNA Affected

[
  {
    "product": "Xiaomi Router AX1800,Xiaomi Rourer RM1800",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Xiaomi Router AX1800 rom version < 1.0.336, Xiaomi Router RM1800 root version < 1.0.26"
      }
    ]
  }
]

EPSS

0.001

Percentile

43.6%

Related for CVELIST:CVE-2020-14099