CVE-2020-14121

2022-04-2117:25:10

Xiaomi

www.cve.org

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of the products being bypassed, and an attacker can exploit the vulnerability to perform a local silent installation.

CNA Affected

[
  {
    "product": "Mi App Store",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Mi App Store version 4.12.2"
      }
    ]
  }
]

References

trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=146