{"id":"CVE-2024-45347","url":"https://www.cyber-defence.io/tools/cve/CVE-2024-45347","generatedAt":"2026-10-28T00:51:50.377Z","title":"An unauthorized access vulnerability exists in the Xiaomi Mi Connect Service APP.","description":"An unauthorized access vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to Unauthorized access to the victim’s device.","published":"2025-06-23T10:15:26.000Z","lastModified":"2026-06-17T07:54:04.000Z","status":"Deferred","sourceIdentifier":"security@xiaomi.com","cvss":{"version":"3.1","score":9.6,"severity":"CRITICAL","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"},"cwe":["CWE-287"],"affected":[],"epss":{"score":0.00279,"percentile":0.20123,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.28%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=548","source":"security@xiaomi.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2024-45347","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}