CVE-2020-14104

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

CVE-2020-14099

On Xiaomi router AX1800 rom version 1.0.336 and RM1800 root version 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password...

CVE-2020-14104

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

CVE-2020-14099

On Xiaomi router AX1800 rom version 1.0.336 and RM1800 root version 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password...

Hardcoded credentials

On Xiaomi router AX1800 rom version 1.0.336 and RM1800 root version 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password...

Race condition

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

CVE-2020-14099

The CVE-2020-14099 entry describes a vulnerability in Xiaomi router AX1800 ROMs older than 1.0.336 and RM1800 root versions older than 1.0.26, where the backup file encryption uses hard-coded keys. This could expose sensitive information such as user passwords. The issue is tied to the encryption...

CVE-2020-14099

On Xiaomi router AX1800 rom version 1.0.336 and RM1800 root version 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password...

CVE-2020-14104

CVE-2020-14104 concerns a race condition in the XQBACKUP component of the Xiaomi router AX3600 running ROM 1.0.50, causing a decompression path error. The issue is documented across multiple sources as affecting the AX3600 with ROM 1.0.50, and it originates from a race condition in XQBACKUP. The ...

CVE-2020-14104

A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50...

Xiaomi MIUI 安全漏洞

Xiaomi MIUI is a set of Android-based smartphone operating systems developed by China's Xiaomi Technology Xiaomi. An information disclosure vulnerability exists in Xiaomi Mobile Phone MIUI versions prior to 2021.01.26. The vulnerability can be exploited by an attacker to obtain a list of running...

Xiaomi MIUI OS 安全漏洞

Xiaomi MIUI OS is a set of customized Android-based mobile operating systems from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in versions of Xiaomi MIUI OS prior to 2020.01.15, which allows to read the SNO information of a device...

Xiaomi Xiaomi router AX3600 竞争条件问题漏洞

Xiaomi router AX3600 is a router from China-based Xiaomi. A security vulnerability exists in the Xiaomi router AX3600 ROM version 1.0.50, which originates from a decompression path error...

Xiaomi router AX1800 信任管理问题漏洞

Xiaomi router AX1800 is a router from China-based Xiaomi. A security vulnerability exists in Xiaomi router AX1800 rom version prior to 1.0.336 and RM1800 root version prior to 1.0.26, which stems from the encryption scheme of the user's backup file using a hard-coded key...

Xiaomi Router 4A Gigabit has a denial of service vulnerability

Xiaomi Router 4A Gigabit is a gigabit router from Xiaomi Technology LLC. A denial of service vulnerability exists in the Xiaomi Router 4A Gigabit Edition, which can be exploited by an attacker to cause a denial of service...

XSS Vulnerability in UPUPOO of Wuhan Xiaomi Network Technology Co.

UPUPOO is a dynamic video desktop software. Wuhan Xiaomi Network Technology Co., Ltd UPUPOO has an XSS vulnerability that can be exploited by attackers to obtain user cookies...

Rocket Compression is vulnerable to dll hijacking

Wuhan Xiaomi Network Technology Co., Ltd. business scope includes: computer software and hardware research, development, technical consulting, technical services; network engineering design and installation; computers and accessories, electronic products excluding electronic publications and so o...

Xiaomi AX1800 and other command injection vulnerabilities

The Xiaomi AX1800 is a router from the Chinese company Xiaomi. A command injection vulnerability exists in Xiaomi AX1800 and others, which can be exploited by an attacker to submit a special request to inject arbitrary OS commands and execute them...

CVE-2020-14102

There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom version 1.0.336 and Xiaomi route RM1800 root version 1.0.26...

CVE-2020-14098

The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version 1.0.336 and Xiaomi route RM1800 root version 1.0.26...