Security updates for IoT devices

Support Policy
Firmware Upgrade Policy

Product Support Policy Overview

We do our best to provide continuous security updates for our IoT products, covering the bands of Xiaomi, RedMi, Mijia, Mitu, and Mijoy. The security updates generally include the latest security patches, security vulnerability fixes, and other security improvements. We will maintain the security updates for at least 2 years from the launch day of certain device models.

We regularly publish and update the end-of-life (EOL) product list below to help you check whether your device can still receive security updates. We also provide detailed software support information for some products on the Product Software Support Information page.

*Security updates cover product hardware (firmware), pre-installed software, software that implements necessary product functions, and external control software.
*We may support the security updates for 3 years or longer for some models, which are subject to actual conditions. If a very serious security vulnerability is discovered, we may also provide the necessary security fixes to you, even if your device is in the EOL product list.

EOL Product List

The following is a list of our EOL (End-Of-Life) products. It means that we no longer maintain any software or firmware updates (including security updates) for them, and may no longer respond to security vulnerability reports for such products either.

Launch Day of the IoT Product

Product NameProduct Launch Day

Mi 360° Home Security Camera 2K

2020-04-09

Mi Robot Vacuum-Mop 2

2021-01-14*

Mesh System AX3000

2021-01-13**

Note:

*Security updates for Mi Robot Vaccum-Mop2 will be provided up to 31 Jan 2024, and extended support may be provided after the stated date.

**Security updates for Mesh System AX3000 will be provided up to 31 Dec 2024, and extended support may be provided after the stated date.

Last Update Date:

*Disclaimer:

1. The information on this page is for reference only, and the actual situation is subject to the security update received by your device.

2. The delivery time of security patches may vary depending on the regions and models.

3. The security updates policies and devices are subject to change and will be reviewed on a regular basis.

Firmware Upgrade and Support Policy

Last update in June 2021

Overview

Xiaomi is committed to keeping all devices secure and working with the latest features according to the established best practices by providing firmware updates within the support time, which include security updates, bug fixes and new functions.

This document describes the firmware update policy and support for security updates, bug fixes and new functions of Xiaomi IoT products.

Upgrade Policy

Xiaomi takes security and privacy issues very seriously. Accordingly, we provide outstanding maintenance of our products that includes technical support and regular releases, which include security updates, bug fixes and new functions based on users' feedback. Generally major version updates are provided annually, whereas minor version updates are provided as needed. However, if some critical vulnerabilities are reported, an immediate update will be arranged.

Xiaomi does not provide security updates for older firmware versions. Therefore, all Xiaomi devices need to be updated to the firmware version that includes the latest security update. Older versions may require multiple sequential firmware updates in order to get the latest version.

For security reasons, no downgrade methods will be provided once firmware is updated. Xiaomi will maintain compatibility between firmware versions.

You can consult the list of products for which firmware updates are no longer supported on the Product Security Center website.

How to Upgrade Firmware

Xiaomi provides two firmware update methods:

Automatic update

Users can enable the automatic firmware update option in the mobile app, under 'Profile' - 'Settings' - 'Check for updates' - 'Automatic firmware updates' Once a new firmware version is available, the device will automatically download the update package and install it without any intervention.

Manual update

If the automatic update option is not enabled, the mobile app will notify the user when a new update is available. Users can manually start the firmware update process by tapping the 'Update' button.

When the device undergoes a firmware update, the user will receive a version update prompt. By installing the latest firmware, users can get new functions or have a better user experience.

Mi Wi-Fi supports firmware upgrading over the Internet, refer to https://www.miwifi.com/miwifi_download.html for details.

Please check whether the firmware is the latest version:

After connecting with the mobile APP, select General Settings, and click 'Firmware Upgrade' to check whether the firmware is the latest version.

If the version is not the latest one, please update, and the update method is as following:

1. Restart the device (first power off, then power up and connect to the Internet).

2. Choose and enter your bonded device.

3. Open the settings menu and select General Settings.

4. Find 'Firmware Upgrade', upgrade the firmware to the latest version.

FAQS

Q:

Will the upgrades get forced to my devices?

A:

If user enable the 'Automatic firmware updates',the device will update automaticlly between 2:00-6:00a.m. without any audio or light notification.

If user doesn't enable the 'Automatic firmware updates', users must manually start the firmware update process by click the 'update' button.

Q:

I’m not ready for an upgrade, what should I do?

A:

You can delay your upgrade by not pressing the upgrade button.

Q:

I’d like to delay receiving firmware upgrades beyond 30 days, what should I do?

A:

Xiaomi strongly advises keeping your device updated to reduce the secuirty risks. We will work with you to make upgrading as easy as possible and have device updates occur at a convenient time for you. Xiaomi will also send you regular reminders to update your devices.

Q:

If the update fails:

A:

Please restart the device and try the update again. Do not cut off power during the update process, power failure will cause damage to the device.

If the update process fails repeatedly, you can try to connect the device to the mobile phone hotspot (some routers will shield the update file) and update under the mobile phone hotspot.

If the problem still exists, please contact customer service to deal with it.