Xiaomi Mi Router 4A Gigabit Edition
From Wiki-IoT
| Xiaomi Mi Router 4A Gigabit Edition | ||
|---|---|---|
|
Security Grade
Calculator v1
|
Xiaomi Mi Router 4A Gigabit Edition
Brand: Xiaomi (Mi) (Parent: Xiaomi Corporation) Category: Router • Model / Gen: 4A Gigabit Edition R4AG / DVB4224GL Release Date: 2018-06-01 • Status: In sale Classification Date: 2026-10-27 • Official Website | |
Contents
Security Evaluation
1. Device Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | Reset button; UART accessible after disassembly. |
| Known vulnerabilities | Very common | [1]🔗 Proof | CVE-2020-14140 unauth Wi-Fi-password leak + command injection; CVE-2026-26898 unauth SSRF. |
| Prior attacks | Rare | 🔗 Proof | Home router scanned but not a named botnet icon. |
| Updatability | Very common | 🔗 Proof | OTA ROM updates via app or web UI. |
| Category Score | Score: 2 / 3 | ||
2. System Security
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | No | 🔗 Proof | Local web admin has no mutual authentication. |
| Communications | Encrypted with obselete encryption | 🔗 Proof | Local HTTP; cloud channel over TLS. |
| Storage | No encryption | 🔗 Proof | Router configuration weakly stored. |
| Category Score | Score: 3 / 3 | ||
3. User Authentication
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Absent | 🔗 Proof | Single administrator; no multi-account model. |
| Authentication | Basic | 🔗 Proof | First-login password, but unauthenticated API bypass exists. |
| Brute-force protection | Absent | 🔗 Proof | No failed-login lockout on the local admin. |
| Event logging | Partial logging | 🔗 Proof | Basic system log only. |
| Passwords | Require change after setup | 🔗 Proof | Default forced to change at first login. |
| Category Score | Score: 3 / 3 | ||
Technical Specifications
| Property | Details |
|---|---|
| Operating System & App | (Companion App: ) |
| Hardware (CPU / GPU) | CPU: • GPU: |
| Memory & Storage | Memory: • Storage: |
| Power, Battery & Charging | Battery: No (mains powered) • Power: 12V DC adapter • Charging: No |
| Display & Camera | Display: No (status LED) • Camera: No |
| Sound & Connectivity | Sound: No • Connectivity: Dual-band Wi-Fi AC1200 (2.4 GHz n 300 Mbps + 5 GHz ac 867 Mbps); Gigabit Ethernet; 4 external antennas |
| Physical (Dimensions & Mass) | Dimensions: • Mass: |
