Vulnerability Details CVE-2020-14099
On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 36.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2020-14099
-
cpe:2.3:h:mi:ax1800:-
-
cpe:2.3:h:mi:rm1800:-
-
cpe:2.3:o:mi:ax1800_firmware:-
-
cpe:2.3:o:mi:rm1800_firmware:-