Approved changes feed: RSS · Atom

cpe:2.3:a:xiaomi:xiaomi_router:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorXiaomi (f3d65b22-9101-5299-b70a-a67e77aa1790)
ProductXiaomi Router (b21e64bb-f208-57cc-8675-935f4f98d2d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-26320 vulnerable 2026-06-03 14:50:59.374046 Xiaomi Router external request interface vulnerability leads to stack overflow
HIGH (7.5)
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.
Published: 2023-10-11T06:49:50.375Z
Updated: 2024-10-08T09:14:15.410Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26319 vulnerable 2026-06-03 14:50:59.373503 Xiaomi Router administration interface vulnerability leads command injection and stack overflow
MEDIUM (6.7)
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection.
Published: 2023-10-11T06:45:07.195Z
Updated: 2024-10-08T09:15:37.726Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26318 vulnerable 2026-06-03 14:50:59.368340 Xiaomi router web interface post-authorization stack overflow
MEDIUM (6.7)
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers.
Published: 2023-10-11T06:42:16.620Z
Updated: 2024-09-18T18:07:54.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-26317 vulnerable 2026-06-03 14:50:59.366823 Xiaomi router external request interface has command injection
HIGH (7)
Xiaomi routers have an external interface that can lead to command injection. The vulnerability is caused by lax filtering of responses from external interfaces. Attackers can exploit this vulnerability to gain access to the router by hijacking the ISP or upper-layer routing.
Published: 2023-08-02T00:00:00.000Z
Updated: 2024-10-16T20:07:44.750Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.