5.3
CVE-2020-14117
- EPSS 0.24%
- Veröffentlicht 21.04.2022 18:15:08
- Zuletzt bearbeitet 21.11.2024 05:02:41
- Quelle security@xiaomi.com
- CVE-Watchlists
- Unerledigt
LoginA improper permission configuration vulnerability in Xiaomi Content Center APP. This vulnerability is caused by the lack of correct permission verification in the Xiaomi content center APP, and attackers can use this vulnerability to invoke the sensitive component functions of the Xiaomi content center APP.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mi ≫ Content Center Version < 4.4.11
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.474 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|