Vulnerability · Published Apr 8, 2021 · Assigned by Xiaomi
CVE-2020-14099
High 7.5
In plain English
A high-severity security flaw in Xiaomi Router AX1800,Xiaomi Rourer RM1800. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)0.6%top 51.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Xiaomi Router AX1800,Xiaomi Rourer RM1800 | Xiaomi Router AX1800 rom version < 1.0.336, Xiaomi Router RM1800 root version < 1.0.26 |