PT-2021-9695 · Xiaomi · Miui

Published 2021-04-08 · Updated 2021-04-14 · CVE-2020-14106

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xiaomi Mobile Phone MIUI versions prior to 2021.01.26

Description The issue allows unauthorized access to the list of running processes on the mobile phone.

Recommendations For versions prior to 2021.01.26, update MIUI to a version released after 2021.01.26 to resolve the issue.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2020-14106

Affected Products

Miui

References · 3

• https://osv.dev/vulnerability/CVE-2020-14106 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-14106 · Security Note
• https://privacy.mi.com/trust#/security/vulnerability-management/vulnerability-announcement/detail?id=29&locale=zh · Vendor Advisory