VulnerabilityDeferred

CVE-2024-45361

A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP.

MEDIUM 6.5EPSS 0.17%

Does this matter?

Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own.

Description

A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.17% probability · 6th percentile
CISA KEV: Not listed
Weakness: CWE-319
Source: security@xiaomi.com

References

https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=558

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.