# cve.now: Xiaomi

The newest entries naming Xiaomi as an affected vendor (up to 200), of 26 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2024-45347](https://cve.now/CVE-2024-45347.md): Mi Connect Service APP protocol flaws lead to unauthorized access (CVSS 9.6)
- [CVE-2024-45361](https://cve.now/CVE-2024-45361.md): Mi Connect Service APP protocol flaws lead to leaking sensitive user information (CVSS 6.5)
- [CVE-2024-45356](https://cve.now/CVE-2024-45356.md): Xiaomi phone framework has unauthorized access vulnerability (CVSS 7.3)
- [CVE-2024-45355](https://cve.now/CVE-2024-45355.md): Xiaomi phone framework has unauthorized access vulnerability (CVSS 5.5)
- [CVE-2024-45354](https://cve.now/CVE-2024-45354.md): xiaomi shop application Webview has code execution vulnerability (CVSS 4.3)
- [CVE-2024-45353](https://cve.now/CVE-2024-45353.md): quick App has intent redriction vulnerability (CVSS 4.3)
- [CVE-2024-45352](https://cve.now/CVE-2024-45352.md): Xiaomi smarthome application Webview has code execution vulnerability (CVSS 8.8)
- [CVE-2024-45351](https://cve.now/CVE-2024-45351.md): Game center application has code execution Vulnerability (CVSS 7.8)
- [CVE-2024-45348](https://cve.now/CVE-2024-45348.md): Xiaomi Router AX9000 has a post-authorization command injection vulnerability (CVSS 6.4)
- [CVE-2023-26322](https://cve.now/CVE-2023-26322.md): GetApps application has code execution vulnerability (CVSS 8.8)
- [CVE-2023-26323](https://cve.now/CVE-2023-26323.md): Xiaomi App Market has a code execution vulnerability (CVSS 7.6)
- [CVE-2023-26321](https://cve.now/CVE-2023-26321.md): The international version of Xiaomi File Manager has a path traversal vulnerability (CVSS 6.3)
- [CVE-2023-26324](https://cve.now/CVE-2023-26324.md): GetApps application has code execution vulnerability (CVSS 8.8)
- [CVE-2024-45346](https://cve.now/CVE-2024-45346.md): GetApps application has code execution vulnerability (CVSS 8.8)
- [CVE-2023-26315](https://cve.now/CVE-2023-26315.md): Xiaomi router has a command injection vulnerability after authorization (CVSS 6.5)
- [CVE-2024-4406](https://cve.now/CVE-2024-4406.md): Xiaomi Pro 13 GetApps integral-dialog-page Cross-Site Scripting Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2024-4405](https://cve.now/CVE-2024-4405.md): Xiaomi Pro 13 mimarket manual-upgrade Cross-Site Scripting Remote Code Execution Vulnerability (CVSS 8.8)
- [CVE-2023-26320](https://cve.now/CVE-2023-26320.md): Xiaomi Router external request interface vulnerability leads to stack overflow (CVSS 7.5)
- [CVE-2023-26319](https://cve.now/CVE-2023-26319.md): Xiaomi Router administration interface vulnerability leads command injection and stack overflow (CVSS 6.7)
- [CVE-2023-26318](https://cve.now/CVE-2023-26318.md): Xiaomi router web interface post-authorization stack overflow (CVSS 6.7)
- [CVE-2023-26317](https://cve.now/CVE-2023-26317.md): Xiaomi router external request interface has command injection (CVSS 7.0)
- [CVE-2020-14094](https://cve.now/CVE-2020-14094.md): In Xiaomi router R3600, ROM version\<1.0.20, the connection service can be injected through the web interface, resulting in stack overflow or (no CVSS)
- [CVE-2020-14095](https://cve.now/CVE-2020-14095.md): In Xiaomi router R3600, ROM version\<1.0.20, a connect service suffers from an injection vulnerability through the web interface, leading to (no CVSS)
- [CVE-2019-13322](https://cve.now/CVE-2019-13322.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Browser Prior to 10.4.0. (CVSS 7.5)
- [CVE-2019-13321](https://cve.now/CVE-2019-13321.md): This vulnerability allows network adjacent attackers to execute arbitrary code on affected installations of Xiaomi Browser Prior to 10.4.0. (CVSS 5.5)
- [CVE-2019-6743](https://cve.now/CVE-2019-6743.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Mi6 Browser prior to 10.4.0. (CVSS 7.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/xiaomi
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.