CVE-2020-14114

2022-07-2215:32:00

Xiaomi

www.cve.org

xiaomi

smarthome

information leakage

vulnerability

sensitive information

js interfaces

illegal calls

cve-2020-14114

EPSS

0.002

Percentile

51.4%

JSON

information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information.

CNA Affected

[
  {
    "product": "Xiaomi SmartHome APP",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Xiaomi SmartHome APP <=6.4.701"
      }
    ]
  }
]

References

trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=277

EPSS

0.002

Percentile

51.4%

JSON

Related for CVELIST:CVE-2020-14114