Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
mi vulnerabilities and exploits
(subscribe to this query)
891
VMScore
CVE-2020-14119
There is command injection in the addMeshNode interface of xqnetwork.lua, which leads to command execution under administrator authority on Xiaomi router AX3600 with rom versionrom< 1.1.12
Mi Ax3600
891
VMScore
CVE-2020-14100
In Xiaomi router R3600 ROM version<1.0.66, filters in the set_WAN6 interface can be bypassed, causing remote code execution. The router administrator can gain root access from this vulnerability.
Mi R3600 Firmware
890
VMScore
CVE-2020-14115
A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data detection. Attackers can exploit this vulnerability to execute code.
Mi Ax3600 Firmware
890
VMScore
CVE-2018-14060
OS command injection in the AP mode settings feature in /cgi-bin/luci /api/misystem/set_router_wifiap on Xiaomi R3D prior to 2.26.4 devices allows an malicious user to execute any command via crafted JSON data.
Mi Xiaomi R3d Firmware
1 Github repository
890
VMScore
CVE-2018-14010
OS command injection in the guest Wi-Fi settings feature in /cgi-bin/luci on Xiaomi R3P prior to 2.14.5, R3C prior to 2.12.15, R3 prior to 2.22.15, and R3D prior to 2.26.4 devices allows an malicious user to execute any command via crafted JSON data.
Mi Xiaomi R3p Firmware
Mi Xiaomi R3c Firmware
Mi Xiaomi R3d Firmware
Mi Xiaomi R3
1 Github repository
801
VMScore
CVE-2020-14109
There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on Xiaomi router AX3600 with ROM version =< 1.1.12
Mi Ax3600 Firmware
801
VMScore
CVE-2020-14102
There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.
Mi Ax1800 Firmware
Mi Rm1800 Firmware
801
VMScore
CVE-2018-16130
System command injection in request_mitv in Xiaomi Mi Router 3 version 2.22.15 allows malicious users to execute arbitrary system commands via the "payload" URL parameter.
Mi Miwifi Os 2.22.15
801
VMScore
CVE-2018-13023
System command injection vulnerability in wifi_access in Xiaomi Mi Router 3 version 2.22.15 allows malicious users to execute system commands via the "timeout" URL parameter.
Mi Miwifi Os 2.22.15
668
VMScore
CVE-2020-14523
Multiple Mitsubishi Electric Factory Automation products have a vulnerability that allows an malicious user to execute arbitrary code.
Mitsubishielectric Cw Configurator
Mitsubishielectric Fr Configurator2
Mitsubishielectric Gx Works2
Mitsubishielectric Gx Works3
Mitsubishielectric Iu Configuration Tool
Mitsubishielectric Iu Developer2
Mitsubishielectric Melsoft Iq Appportal
Mitsubishielectric Melsoft Navigator
Mitsubishielectric Mi Configurator
Mitsubishielectric Mr Configurator2
Mitsubishielectric Mt Works2
Mitsubishielectric Mx Component
Mitsubishielectric Rt Toolbox3
Mitsubishielectric Rd78g4 Firmware
Mitsubishielectric Rd78g8 Firmware
Mitsubishielectric Rd78g16 Firmware
Mitsubishielectric Rd78g32 Firmware
Mitsubishielectric Rd78g64 Firmware
Mitsubishielectric Rd78ghv Firmware
Mitsubishielectric Rd78ghw Firmware
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3380
CVE-2024-1694
local file inclusion
CVE-2024-5645
CVE-2024-24919
XSS
CVE-2024-36774
CVE-2024-21306
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »