mi Vulnerability Advisory Catalog

Total 100 security vulnerabilities recorded for mi software and firmware.

CVE-2018-13022 MEDIUM

Component: miwifi_os

Cross-site scripting vulnerability in the API 404 page on Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary JavaScript via a mo...

📅 2018-11-27

CVSS 6.1 Dossier →

CVE-2018-16307 HIGH

Component: xiaomi_miwifi_xiaomi_55dd_firmware

An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi_55DD Version 2.8.50 devices. It is possible to induce the application to r...

📅 2018-09-05

CVSS 7.5 Dossier →

CVE-2018-14060 CRITICAL

Component: xiaomi_r3d_firmware

OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D before 2.26.4 devices allows an at...

📅 2018-07-15

CVSS 9.8 Dossier →

CVE-2018-14010 CRITICAL

Component: xiaomi_r3p_firmware

OS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P before 2.14.5, R3C before 2.12.15, R3 before 2.22.15, and R3D ...

📅 2018-07-15

CVSS 9.8 Dossier →

Page 5 of 5 (100 Total Records)

← Previous Page