CVE-2020-14131

Based on connected documents, CVE-2020-14131 concerns Xiaomi Security Center devices where vulnerability stems from a lack of authentication, enabling an attacker to obtain elevated privileges. The embedded reports describe a privilege escalation path without specifying exact product versions or ...

Xiaomi specific devices 安全漏洞

Xiaomi specific devices are a series of specific devices from the Chinese company Xiaomi. A security vulnerability exists in Xiaomi specific devices, which stems from a lack of authentication. An attacker could exploit this vulnerability to gain elevated privileges...

CVE-2020-14131

The Xiaomi Security Center expresses heartfelt thanks to ADLab of VenusTech ! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center MiSRC to jointly ensure the safe access of millions of Xiaomi users worldwide Life...

PT-2022-8561 · Xiaomi · Xiaomi Security Center

Name of the Vulnerable Software and Affected Versions: Xiaomi Security Center affected versions not specified Description: The issue concerns the security of Xiaomi users worldwide. There is no specific information about the nature of the problem or its technical details. Recommendations: At the...

CVE-2020-14129

CVE-2020-14129 concerns a logic vulnerability in a Xiaomi product due to an identity verification failure that enables a brief elevation of privileges. The NVD entry rates it CVSS v3.1 as 9.8 (CRITICAL): attack vector NETWORK, attack complexity LOW, privileges required NONE, user interaction NONE...

CVE-2020-14129

A logic vulnerability exists in a Xiaomi product. The vulnerability is caused by an identity verification failure, which can be exploited by an attacker who can obtain a brief elevation of privilege...

Xiaomi specific devices 安全漏洞

Xiaomi specific devices are a series of specific devices from the Chinese company Xiaomi. A security vulnerability exists in Xiaomi specific devices, which stems from an authentication failure. An attacker could exploit this vulnerability to gain a short-lived elevation of privilege...

PT-2022-8560 · Xiaomi · Xiaomi

Name of the Vulnerable Software and Affected Versions: Xiaomi product affected versions not specified Description: A logic issue exists due to an identity verification failure, allowing an attacker to briefly elevate their privileges. Recommendations: At the moment, there is no information about ...

PT-2022-23609 · Xiaomi · Xiaomi Mi Browser

Name of the Vulnerable Software and Affected Versions: Xaomi Mi Browser version 13.10.0-gn Description: The issue allows attackers to execute arbitrary code via user interaction with a crafted URL. Recommendations: For Xaomi Mi Browser version 13.10.0-gn, at the moment, there is no information...

Xiaomi Phone Bug Allowed Payment Forgery

Smartphone maker Xiaomi, the world’s number three phone maker behind Apple and Samsung, reported it has patched a high-severity flaw in its “trusted environment” used to store payment data that opened some of its handsets to attack. Researchers at Check Point Research revealed last week in a repo...

Xiaomi Phones with MediaTek Chips Found Vulnerable to Forged Payments

Security flaws have been identified in Xiaomi Redmi Note 9T and Redmi Note 11 models, which could be exploited to disable the mobile payment mechanism and even forge transactions via a rogue Android app installed on the devices. Check Point said it found the flaws in devices powered by MediaTek...

Xiaomi SmartHome APP Information Disclosure Vulnerability

Xiaomi SmartHome APP is an app from Chinese company Xiaomi Xiaomi to manage Xiaomi smart home products. Xiaomi SmartHome APP suffers from an information leakage vulnerability, which originates from remote calls to some interfaces and can be exploited by attackers to obtain sensitive information...

Xiaomi Mi Sound Information Disclosure Vulnerability

Xiaomi Mi Sound is a smart audio app by Chinese company Xiaomi Xiaomi. Xiaomi Mi Sound suffers from an information disclosure vulnerability, which stems from the fact that part of the interface can be remotely invoked, which can be exploited by an attacker to obtain sensitive information...

CVE-2020-14114

information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information...

CVE-2020-14114

information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information...

Information disclosure

information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information...

CVE-2020-14114

information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information...

CVE-2020-14114

Technical details about CVE-2020-14114 are not provided in the connected documents. The Xiaomi SmartHome APP information-leakage description is general; monitor for updates from vendors and CVE sources.

Xiaomi SmartHome APP 信息泄露漏洞

Xiaomi SmartHome APP is an app from Chinese company Xiaomi Xiaomi to manage Xiaomi smart home products. Xiaomi SmartHome APP suffers from an information leakage vulnerability, which originates from remote calls to some interfaces and can be exploited by attackers to obtain sensitive information...

Xiaomi Mi Sound APP 信息泄露漏洞

Xiaomi Mi Sound is a smart audio app by Chinese company Xiaomi Xiaomi. Xiaomi Mi Sound suffers from an information disclosure vulnerability, which stems from the fact that part of the interface can be remotely invoked, which can be exploited by an attacker to obtain sensitive information...