NetSight
high7.5

CVE-2020-14099

On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can…

Impact

On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password.

Affected products

VendorProductAffected versions
MiAx1800 Firmware
before 1.0.336
MiRm1800 Firmware
before 1.0.26

Weakness classification

References