GCVE - cpe:2.3:h:mi:rm1800:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:mi:rm1800:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Mi (`60a5be67-ae7d-588b-8dcf-30a3da19041f`)
Product	Rm1800 (`c89da34c-f8ef-52b1-9231-dafd55944bfb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-14102`	not_vulnerable	2026-06-08 05:18:02.034376	Details available There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26. Published: 2021-01-13T22:33:05.000Z Updated: 2024-08-04T12:39:35.901Z Open on db.gcve.eu Reference links https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=23&locale=en	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14101`	not_vulnerable	2026-06-08 05:18:02.033724	Details available The data collection SDK of the router web management interface caused the leakage of the token. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26. Published: 2021-01-13T22:25:07.000Z Updated: 2024-08-04T12:39:35.663Z Open on db.gcve.eu Reference links https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=24&locale=en	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14099`	not_vulnerable	2026-06-08 05:18:02.029963	Details available On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password. Published: 2021-04-08T17:52:45.000Z Updated: 2024-08-04T12:39:36.163Z Open on db.gcve.eu Reference links https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=25&locale=zh	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14098`	not_vulnerable	2026-06-08 05:18:02.028936	Details available The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26. Published: 2021-01-13T22:30:41.000Z Updated: 2024-08-04T12:39:35.729Z Open on db.gcve.eu Reference links https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=22&locale=en	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.