İçeriğe atla
Noroxi

mi kayıtları

mi üreticisine ait 101 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %1
Silahlaştırılmış
1 · %1
Pre-auth RCE
24
Düzeltme kaydı olan
%9,9
Yayından KEV’e ortanca
1302 gün

Yıllara göre kayıt

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

101 kayıt
  • CVE-2018-6065
    83Hemen

    Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %60

    google · chrome14 Kas 2018

  • CVE-2019-18370
    51Planlayın

    An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.

    KritikCVSS 9,8Kavram kanıtıEPSS %40

    mi · millet router 3g firmware23 Eki 2019

  • CVE-2019-18371
    47Planlayın

    An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable.

    YüksekCVSS 7,5Kavram kanıtıEPSS %56

    mi · millet router 3g firmware23 Eki 2019

  • CVE-2018-16130
    42Planlayın

    System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the

    YüksekCVSS 8,8İstismar yokEPSS %24

    mi · miwifi os27 Kas 2018

  • CVE-2018-13023
    42Planlayın

    System command injection vulnerability in wifi_access in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via

    YüksekCVSS 8,8İstismar yokEPSS %24

    mi · miwifi os27 Kas 2018

  • CVE-2023-26315
    41Planlayın

    Xiaomi router has a command injection vulnerability after authorization

    YüksekCVSS 8,8İstismar yokEPSS %19

    mi · ax9000 firmware26 Ağu 2024

  • CVE-2020-14100
    41Planlayın

    In Xiaomi router R3600 ROM version<1.0.66, filters in the set_WAN6 interface can be bypassed, causing remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %6

    mi · r3600 firmware11 Eyl 2020

  • CVE-2018-14060
    40Planlayın

    OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D before 2.26.4 devices al

    KritikCVSS 9,8İstismar yokEPSS %5

    mi · xiaomi r3d firmware14 Tem 2018

  • CVE-2018-14010
    40Planlayın

    OS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P before 2.14.5, R3C before 2.12.15, R3 before 2.22.15

    KritikCVSS 9,8İstismar yokEPSS %5

    mi · xiaomi r3p firmware14 Tem 2018

  • CVE-2020-14119
    40Planlayın

    There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on

    KritikCVSS 9,8İstismar yokEPSS %3

    mi · ax360016 Eyl 2021

  • CVE-2020-10561
    40Planlayın

    An issue was discovered on Xiaomi Mi Jia ink-jet printer < 3.4.6_0138.

    KritikCVSS 9,8İstismar yokEPSS %2

    mi · mijia inkjet printer firmware24 Haz 2020

  • CVE-2020-14095
    40Planlayın

    In Xiaomi router R3600, ROM version<1.0.20, a connect service suffers from an injection vulnerability through the web interface, leading to

    KritikCVSS 9,8İstismar yokEPSS %2

    mi · xiaomi r3600 firmware24 Haz 2020

  • CVE-2020-14094
    40Planlayın

    In Xiaomi router R3600, ROM version<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or

    KritikCVSS 9,8İstismar yokEPSS %2

    mi · xiaomi r3600 firmware24 Haz 2020

  • CVE-2020-14124
    40Planlayın

    There is a buffer overflow in librsa.so called by getwifipwdurl interface, resulting in code execution on Xiaomi router AX3600 with ROM vers

    KritikCVSS 9,8İstismar yokEPSS %2

    mi · ax3600 firmware16 Eyl 2021

  • CVE-2024-4406
    39İzleyin

    Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability

    KritikCVSS 9,6Kavram kanıtıEPSS %2

    mi · xiaomi 13 pro firmware2 May 2024

  • CVE-2020-11960
    39İzleyin

    Xiaomi router R3600 ROM before 1.0.50 is affected by a vulnerability when checking backup file in c_upload interface let attacker able to ex

    KritikCVSS 9,8İstismar yokEPSS %1

    mi · xiaomi r3600 firmware24 Haz 2020

  • CVE-2019-15913
    39İzleyin

    An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices.

    KritikCVSS 9,8İstismar yokEPSS %1

    mi · dgnwg03lm firmware20 Ara 2019

  • CVE-2020-14096
    39İzleyin

    Memory overflow in Xiaomi AI speaker Rom version <1.59.6 can happen when the speaker verifying a malicious firmware during OTA process.

    KritikCVSS 9,8İstismar yokEPSS %1

    mi · xiaomi ai speaker firmware11 Eyl 2020

  • CVE-2020-14115
    39İzleyin

    A command injection vulnerability exists in the Xiaomi Router AX3600.

    KritikCVSS 9,8İstismar yokEPSS %1

    mi · ax3600 firmware10 Mar 2022

  • CVE-2023-26317
    39İzleyin

    Xiaomi router external request interface has command injection

    KritikCVSS 9,8İstismar yokEPSS %1

    mi · xiaomi router firmware2 Ağu 2023

  • CVE-2018-18698
    39İzleyin

    An issue was discovered on Xiaomi Mi A1 tissot_sprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices.

    KritikCVSS 9,8İstismar yokEPSS %1

    mi · xiaomi mi-a1 firmware24 Ara 2018

  • CVE-2020-14129
    39İzleyin

    A logic vulnerability exists in a Xiaomi product.

    KritikCVSS 9,8İstismar yokEPSS %1

    mi · xiaomi11 Eki 2022

  • CVE-2020-14131
    39İzleyin

    The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and profess

    KritikCVSS 9,8İstismar yokEPSS %1

    mi · xiaomi11 Eki 2022

  • CVE-2023-26322
    39İzleyin

    GetApps application has code execution vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    mi · getapps28 Ağu 2024

  • CVE-2023-26324
    39İzleyin

    GetApps application has code execution vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    mi · getapps28 Ağu 2024