Mi Xiaomi vulnerabilities

3 CVEs affecting Mi Xiaomi, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-14131, published 2022-10-11.

More from Mi.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-14129, published 2022-10-11. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A logic vulnerability exists in a Xiaomi product. The vulnerability is caused by an identity verification failure, which can be exploited by an attacker who can obtain a brief elevation of privilege.
• CVE-2020-14131, published 2022-10-11. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi…
• CVE-2020-14130, published 2021-09-16. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. Some js interfaces in the Xiaomi community were exposed, causing sensitive functions to be maliciously called on Xiaomi community app Affected Version <3.0.210809