PatchTheCVEmi vulnerabilities
Recent CVEs affecting mi products. 10 tracked.
mi has 10 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-09-23. Highest priority: CVE-2024-4406 (score 54/100).
- CVE-2024-4406 CRITICAL 9.6 MITIGATE Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability
- CVE-2024-4405 CRITICAL 9.6 MITIGATE Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability
- CVE-2024-45348 MEDIUM 6.4 UPGRADE Xiaomi Router AX9000 has a post-authorization command injection vulnerability
- CVE-2024-37664 MEDIUM 5.2 MITIGATE Redmi router RB03 v1.0.57 is vulnerable to TCP DoS or hijacking attacks
- CVE-2024-37663 MEDIUM 4.1 MITIGATE Redmi router RB03 v1.0.57 is vulnerable to forged ICMP redirect message attacks
- CVE-2023-26324 HIGH 8.8 UPGRADE A code execution vulnerability exists in the XiaomiGetApps application product
- CVE-2023-26323 HIGH 7.6 UPGRADE A code execution vulnerability exists in the Xiaomi App market product
- CVE-2023-26322 HIGH 8.8 UPGRADE A code execution vulnerability exists in the XiaomiGetApps application product
- CVE-2023-26321 MEDIUM 6.3 DOWNGRADE A path traversal vulnerability exists in the Xiaomi File Manager application product(international version)
- CVE-2023-26315 MEDIUM 6.5 UPGRADE The Xiaomi router AX9000 has a post-authentication command injection vulnerability
FAQ
How do I fix mi vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mi being exploited right now?
None of the tracked mi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mi CVE should I patch first?
CVE-2024-4406 currently ranks highest (54/100): Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability.