Mi AX9000 Firmware vulnerabilities

2 CVEs affecting Mi AX9000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-45348, published 2024-09-23.

More from Mi.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-26315, published 2024-08-26. High severity, CVSS 8.8. EPSS: 19.4% chance of exploitation in the next 30 days. The Xiaomi router AX9000 has a post-authentication command injection vulnerability. This vulnerability is caused by the lack of input filtering, allowing an attacker to exploit it to obtain root…
• CVE-2024-45348, published 2024-09-23. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Xiaomi Router AX9000 has a post-authorization command injection vulnerability. This vulnerability is caused by the lack of validation of user input, and an attacker can exploit this vulnerability to…