Xiaomi Ax6 Authorization Issues Vulnerabilities

Xiaomi Ax6 is a router from Chinese company Xiaomi. Xiaomi Ax6 suffers from an authorization issue vulnerability that stems from a program misconfiguration, which can be exploited by an attacker to download unauthorized data...

Redmi router AX5 suffers from denial of service vulnerability

Redmi Router AX5 is a router from Xiaomi. Redmi Router AX5 has a denial of service vulnerability that can be exploited by attackers to cause denial of service attacks...

Xiaomi Mi 9 MIUI 12.0.5 has a logic flaw vulnerability

Xiaomi Mi 9 is a phone released by Xiaomi on February 20, 2019 at 14:00 at the Beijing Institute of Technology Gymnasium. Xiaomi Mi 9 MIUI 12.0.5 has a logic flaw vulnerability. An attacker can use this vulnerability to bypass the system screen lock and transfer any malicious file to the target...

The vulnerability of the set_WAN6 interface in Xiaomi R3600 router software allows a attacker to execute arbitrary code on the target system.

The vulnerability of the setWAN6 interface in Xiaomi R3600 router microprogramming software is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system by sending specially crafted network packets...

VulnCheck KEV: CVE-2018-13023

System command injection vulnerability in wifiaccess in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via the "timeout" URL parameter...

Xiaomi MIUI Information Disclosure Vulnerability

Xiaomi MIUI is a set of Android-based smartphone operating systems developed by China's Xiaomi Technology Xiaomi. An information disclosure vulnerability exists in Xiaomi MIUI version 11.0.5.0.QFAEUXM. The vulnerability can be exploited by an attacker with an NFC tool to install an application an...

Xiaomi AI speaker Rom buffer overflow vulnerability

Xiaomi AI speaker Rom is a smart speaker device from Chinese company Xiaomi. A buffer overflow vulnerability exists in versions prior to Xiaomi AI speaker Rom 1.59.6, which originates from a memory overflow during the OTA process that can be exploited by an attacker to validate malicious firmware...

Xiaomi router input validation error vulnerability

Xiaomi router is a wireless router from the Chinese company Xiaomi Technology Xiaomi. An input validation error vulnerability exists in the Xiaomi router R3600 ROM prior to version 1.0.66, which stems from a filter in the set WAN6 interface that can be bypassed, leading to remote code execution. ...

CVE-2020-14100

In Xiaomi router R3600 ROM version1.0.66, filters in the setWAN6 interface can be bypassed, causing remote code execution. The router administrator can gain root access from this vulnerability...

CVE-2020-14096

Memory overflow in Xiaomi AI speaker Rom version 1.59.6 can happen when the speaker verifying a malicious firmware during OTA process...

CVE-2020-14100

In Xiaomi router R3600 ROM version1.0.66, filters in the setWAN6 interface can be bypassed, causing remote code execution. The router administrator can gain root access from this vulnerability...

CVE-2020-14096

Memory overflow in Xiaomi AI speaker Rom version 1.59.6 can happen when the speaker verifying a malicious firmware during OTA process...

Design/Logic Flaw

Memory overflow in Xiaomi AI speaker Rom version 1.59.6 can happen when the speaker verifying a malicious firmware during OTA process...

Design/Logic Flaw

In Xiaomi router R3600 ROM version1.0.66, filters in the setWAN6 interface can be bypassed, causing remote code execution. The router administrator can gain root access from this vulnerability...

CVE-2020-14100

In Xiaomi router R3600 ROM version1.0.66, filters in the setWAN6 interface can be bypassed, causing remote code execution. The router administrator can gain root access from this vulnerability...

CVE-2020-14100

The CVE-2020-14100 entry affects Xiaomi router R3600 ROM = 1.0.66 or vendor-provided security guidance; otherwise, monitoring for updates is advised. This summary is based on the connected documents; no additional details beyond what is stated are provided.

CVE-2020-14096

Memory overflow in Xiaomi AI speaker Rom version 1.59.6 can happen when the speaker verifying a malicious firmware during OTA process...

CVE-2020-14096

The provided connected documents describe a memory overflow in the Xiaomi AI speaker Rom versions older than 1.59.6 that can occur when verifying a malicious firmware during OTA. The vulnerability is characterized with a CRITICAL impact (CVSSv3.1: 9.8) and affects the OTA verification path; explo...

Unspecified vulnerability in Xiaomi R3600 (CNVD-2021-19777)

The Xiaomi R3600 is a wireless router from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in the Xiaomi R3600 ROM prior to version 1.0.20. A remote attacker can exploit the vulnerability to execute code...

Unspecified Vulnerability in Xiaomi R3600

The Xiaomi R3600 is a wireless router from Chinese company Xiaomi Technology Xiaomi. A security vulnerability exists in the Xiaomi R3600 ROM prior to version 1.0.20. A remote attacker can exploit the vulnerability to execute code...