VULNERABILITY INTELLIGENCE

CVE-2020-14114

CVSS score7.5 HIGH
EPSS probability0.74%
CISA KEVNot currently listed
Published2022-07-22
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references