PT-2018-14578 · Xiaomi · Xiaomi Mi A1
Published
2018-12-24
·
Updated
2020-08-24
·
CVE-2018-18698
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Xiaomi Mi A1 version 8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE
Description
An issue was discovered where devices store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot.
Recommendations
For version 8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE, consider restricting access to logcat to minimize the risk of exploitation. As a temporary workaround, avoid setting up the phone as a hotspot until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.
Exploit
Fix
Insufficiently Protected Credentials
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Xiaomi Mi A1