PT-2022-8558 · Xiaomi · Mi Sound App

Published 2022-07-22 · Updated 2022-07-28 · CVE-2020-14126

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mi Sound APP (affected versions not specified)

Description The issue is caused by illegal calls to sensitive JS interfaces, allowing attackers to leak sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2020-14126

Affected Products

Mi Sound App

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-14126 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14126 · Vendor Advisory
• https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=278 · Vendor Advisory
• https://t.me/cibsecurity/46823 · Telegram Post