VULNERABILITY INTELLIGENCE
CVE-2024-45361
CVSS score6.5 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2025-03-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information.
Weakness classification
- security@xiaomi.com: CWE-319