Mi Security Vulnerabilities (CVEs)

This path traversal vulnerability in Xiaomi File Manager allows attackers to write arbitrary files to sensitive locations by manipulating file paths. ...

This vulnerability allows attackers to bypass verification logic in XiaomiGetApps, potentially leading to remote code execution. Users of Xiaomi devic...

This vulnerability allows attackers to bypass verification logic in XiaomiGetApps, potentially leading to remote code execution on affected devices. U...

Xiaomi AX9000 routers have a post-authentication command injection vulnerability that allows authenticated attackers to execute arbitrary commands wit...

This vulnerability allows attackers on the same wireless network to disrupt or hijack TCP connections by sending forged TCP RST packets to the Redmi r...

This CVE describes a command injection vulnerability in Xiaomi routers that allows attackers to execute arbitrary commands on the device. Attackers ca...

Xiaomi routers have a command injection vulnerability in their external interface due to insufficient input filtering. Attackers can exploit this by h...

CVE-2020-14140 is an unauthenticated API vulnerability in Xiaomi router firmware that allows attackers to retrieve WiFi passwords without authenticati...

This vulnerability in the Mi Sound APP allows attackers to exploit improperly secured JavaScript interfaces to access sensitive information. It affect...

This CVE describes a heap overflow vulnerability in certain Xiaomi phone models that allows remote attackers to cause denial of service. The vulnerabi...

CVE-2022-31277 is a replay attack vulnerability in Xiaomi Lamp 1 smart bulbs that allows attackers to capture and reuse authentication requests. This ...

This vulnerability in some Xiaomi devices allows attackers to achieve privilege escalation by exploiting insufficient parameter validation in third-pa...

This CVE describes a command injection vulnerability in Xiaomi Router AX3600 firmware that allows attackers to execute arbitrary code on affected devi...

This vulnerability is a stack overflow in the HTTP server of Cast that can be exploited via LAN to cause application crashes. It affects Cast devices ...

This vulnerability allows remote command injection in the meshd routing service on Xiaomi AX3600 routers, enabling attackers to execute arbitrary comm...

This vulnerability in Xiaomi routers allows attackers to decrypt backup files containing sensitive user information like passwords due to hard-coded e...