CVE-2024-45361

{"id": "CVE-2024-45361", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@xiaomi.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2025-03-27T08:15:17.263", "references": [{"url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=558", "source": "security@xiaomi.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "security@xiaomi.com", "description": [{"lang": "en", "value": "CWE-319"}]}], "descriptions": [{"lang": "en", "value": "A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information."}, {"lang": "es", "value": "Existe una vulnerabilidad de protocolo en Xiaomi Mi Connect Service APP. Esta vulnerabilidad se debe a un fallo en la l\u00f3gica de validaci\u00f3n y puede ser explotada por atacantes para filtrar informaci\u00f3n confidencial del usuario."}], "lastModified": "2025-03-27T16:45:27.850", "sourceIdentifier": "security@xiaomi.com"}