Browse CVEs

HIGH 7.5 CVE-2018-20823 The gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service (resonance and false data) via a 20.4 kHz audio signal, aka a MEM… Mi 5s Firmware No fix yet Fix from $1,9502019-04-25 MEDIUM 6.5 CVE-2019-10875 A URL spoofing vulnerability was found in all international versions of Xiaomi Mi browser 10.5.6-g (aka the MIUI native browser) and Mint Browser 1.5… Mi Browser No fix yet Fix from $1,6002019-04-05 MEDIUM 5.5 CVE-2019-8413 On Xiaomi MIX 2 devices with the 4.4.78 kernel, a NULL pointer dereference in the ioctl interface of the device file /dev/elliptic1 or /dev/elliptic0… Mi Mix 2 Firmware No fix yet Fix from $1,6002019-02-17 CRITICAL 9.8 CVE-2018-18698 An issue was discovered on Xiaomi Mi A1 tissot_sprout:8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE devices. They store cleartext Wi-Fi passwords in logcat … Xiaomi Mi A1 Firmware Mitigation only Fix from $2,3002018-12-24 HIGH 8.8 CVE-2018-13023EPSS 24% System command injection vulnerability in wifi_access in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute system commands via the "time… Miwifi Os No fix yet Fix from $1,9502018-11-27 HIGH 8.8 CVE-2018-16130EPSS 24% System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary system commands via the "payload… Miwifi Os No fix yet Fix from $1,9502018-11-27 MEDIUM 6.1 CVE-2018-13022 Cross-site scripting vulnerability in the API 404 page on Xiaomi Mi Router 3 version 2.22.15 allows attackers to execute arbitrary JavaScript via a m… Miwifi Os No fix yet Fix from $1,6002018-11-27 HIGH 7.5 CVE-2018-16307 An "Out-of-band resource load" issue was discovered on Xiaomi MIWiFi Xiaomi_55DD Version 2.8.50 devices. It is possible to induce the application to … Xiaomi Miwifi Xiaomi 55dd Firmware No fix yet Fix from $1,9502018-09-05