High severity7.5NVD Advisory· Published Apr 8, 2021· Updated Jun 17, 2026

CVE-2020-14099

Description

On Xiaomi router AX1800 rom version < 1.0.336 and RM1800 root version < 1.0.26, the encryption scheme for a user's backup files uses hard-coded keys, which can expose sensitive information such as a user's password.

Affected products

Mi/Ax1800 Firmware
cpe:2.3:o:mi:ax1800_firmware:*:*:*:*:*:*:*:*
Range: <1.0.336
Mi/Rm1800 Firmware
cpe:2.3:o:mi:rm1800_firmware:*:*:*:*:*:*:*:*
Range: <1.0.26
Xiaomi/router AX1800description
Xiaomi/AX1800llm-create
Range: <1.0.336
Xiaomi/RM1800llm-fuzzy
Range: <1.0.26

Patches

Vulnerability mechanics

References

privacy.mi.com/trustnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000