PT-2022-8549 · Xiaomi · Xiaomi Smarthome App

Published 2022-07-22 · Updated 2022-07-28 · CVE-2020-14114

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Xiaomi SmartHome APP (affected versions not specified)

Description The issue is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-14114

Affected Products

Xiaomi Smarthome App

References · 4

• https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=277 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-14114 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14114 · Vendor Advisory
• https://t.me/cibsecurity/46824 · Telegram Post