CVEvulnerability

CVE-2024-45347

9.6 CRITICAL Published 2025-06-23 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-06-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.6 CRITICAL — CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-287

Description

An unauthorized access vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to Unauthorized access to the victim’s device.

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References