Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-9530
HistoryMar 06, 2020 - 5:15 p.m.

Design/Logic Flaw

2020-03-0617:15:00
PRIOn knowledge base
www.prio-n.com
1

6.2 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%

An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. The export component of GetApps(com.xiaomi.mipicks) mishandles the functionality of opening other components. Attackers need to induce users to open specific web pages in a specific network environment. By jumping to the WebView component of Messaging(com.android.MMS) and loading malicious web pages, information leakage can occur. This is fixed on version: 2001122; 11.0.1.54.

CPENameOperatorVersion
miui_firmwareeq11.0.50-qfaeuxm

6.2 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.0%

Related for PRION:CVE-2020-9530