CVE-2023-26317

The CVE-2023-26317 entry concerns Xiaomi routers with an external interface that can be abused to perform command injection. The root cause is lax filtering of responses from the external interface, enabling an attacker to hijack ISP routing or an upper-layer route to gain unauthorized access and...

CVE-2020-14140

The CVE-2020-14140 entry concerns Xiaomi router firmware. Affected component: router API interfaces lacking access control, leading to an unauthenticated API that can reveal the WIFI password. Root cause: insufficient access control on certain API endpoints, enabling unauthorized access. Impact: ...