PT-2022-8551 · Xiaomi · Mi Browser

Published 2022-04-21 · Updated 2022-05-02 · CVE-2020-14116

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Mi Browser (affected versions not specified)

Description The issue is caused by the Mi Browser not verifying the validity of incoming data, leading to an intent redirection vulnerability. This allows attackers to perform sensitive operations by exploiting the vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2020-14116

Affected Products

Mi Browser

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-14116 · Security Note
• https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=148 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-14116 · Vendor Advisory
• https://t.me/cibsecurity/41258 · Telegram Post