CVE-2020-14098: High severity mi ax1800 firmware vulnerability
Published Jan 13, 2021
·Updated
The login verification can be bypassed by using the problem that the time is not synchronized after the router restarts. This affects Xiaomi router AX1800rom version < 1.0.336 and Xiaomi route RM1800 root version < 1.0.26.
Affected Software
4 affected components
Mi Ax1800 Firmware<1.0.336
Mi AX1800
Mi Rm1800 Firmware<1.0.26
Mi RM1800
Event History
Jan 13, 2021
CVE Published
via MITRE·10:30 PM
Data Sourced
via MITRE·10:30 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
CVE-2020-14098
2
What is the severity rating of CVE-2020-14098?
The severity rating of CVE-2020-14098 is high with a value of 7.5.
3
Which software versions are affected by CVE-2020-14098?
Xiaomi router AX1800rom version < 1.0.336 and Xiaomi router RM1800 root version < 1.0.26 are affected.
4
How can CVE-2020-14098 be exploited?
CVE-2020-14098 can be exploited by bypassing the login verification using the time synchronization issue after the router restarts.
5
Is there a fix available for CVE-2020-14098?
To fix CVE-2020-14098, users should update their Xiaomi router AX1800rom and RM1800 firmware to versions 1.0.336 and 1.0.26 or above respectively.