Mi Xiaomi Router Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Mi Xiaomi Router Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2020-14140 — CVSS 7.5 (high): When Xiaomi router firmware is updated in 2020, there is an unauthenticated API that can reveal WIFI password vulnerability. This…
• CVE-2023-26317 — CVSS 7.0 (high): Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filtering of responses…