This page lists publicly disclosed CVE vulnerabilities affecting mi rm1800_firmware (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2020-14099 | On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password. | [email protected] | 7.5 | 0.60% | 2021-04-08 | 2026-06-16 |
| CVE-2020-14102 | There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26. | [email protected] | 7.2 | 1.88% | 2021-01-13 | 2026-06-16 |
| CVE-2020-14101 | The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26. | [email protected] | 7.5 | 1.06% | 2021-01-13 | 2026-06-16 |
| CVE-2020-14098 | The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26. | [email protected] | 7.5 | 1.22% | 2021-01-13 | 2026-06-16 |