Mi Xiaomi Router Firmware vulnerabilities

2 CVEs affecting Mi Xiaomi Router Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-26317, published 2023-08-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-26317, published 2023-08-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filtering of responses from external interfaces. Attackers can exploit this…
CVE-2020-14140, published 2023-03-29. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerability. This vulnerability is caused by the lack of access control policies on…