CVE-2024-45361

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-45361", "assignerOrgId": "b57733aa-7326-4f07-8e09-0be8e0df1909", "state": "PUBLISHED", "assignerShortName": "Xiaomi", "dateReserved": "2024-08-28T02:24:48.946Z", "datePublished": "2025-03-27T07:16:21.898Z", "dateUpdated": "2025-06-23T09:43:27.193Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Xiaomi Mi Connect Service", "vendor": "Xiaomi", "versions": [{"status": "affected", "version": "Xiaomi Mi Connect Service3.1.895.10"}]}], "datePublic": "2025-03-27T09:43:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information. <br>"}], "value": "A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information."}], "impacts": [{"capecId": "CAPEC-157", "descriptions": [{"lang": "en", "value": "CAPEC-157 Sniffing Attacks"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-319", "description": "CWE-319 Cleartext Transmission of Sensitive Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "b57733aa-7326-4f07-8e09-0be8e0df1909", "shortName": "Xiaomi", "dateUpdated": "2025-06-23T09:43:27.193Z"}, "references": [{"url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=558"}], "source": {"discovery": "UNKNOWN"}, "title": "Mi Connect Service APP protocol flaws lead to leaking sensitive user information", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-27T13:30:58.813684Z", "id": "CVE-2024-45361", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-27T13:31:06.739Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-45361", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-27T13:30:58.813684Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-27T13:31:02.253Z"}}], "cna": {"title": "Mi Connect Service APP protocol flaws lead to leaking sensitive user information", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-157", "descriptions": [{"lang": "en", "value": "CAPEC-157 Sniffing Attacks"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Xiaomi", "product": "Xiaomi Mi Connect Service", "versions": [{"status": "affected", "version": "Xiaomi Mi Connect Service3.1.895.10"}], "defaultStatus": "unaffected"}], "datePublic": "2025-03-27T09:43:00.000Z", "references": [{"url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=558"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information.", "supportingMedia": [{"type": "text/html", "value": "A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information. <br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-319", "description": "CWE-319 Cleartext Transmission of Sensitive Information"}]}], "providerMetadata": {"orgId": "b57733aa-7326-4f07-8e09-0be8e0df1909", "shortName": "Xiaomi", "dateUpdated": "2025-06-23T09:43:27.193Z"}}}, "cveMetadata": {"cveId": "CVE-2024-45361", "state": "PUBLISHED", "dateUpdated": "2025-06-23T09:43:27.193Z", "dateReserved": "2024-08-28T02:24:48.946Z", "assignerOrgId": "b57733aa-7326-4f07-8e09-0be8e0df1909", "datePublished": "2025-03-27T07:16:21.898Z", "assignerShortName": "Xiaomi"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Xiaomi Mi Connect Service", "vendor": "Xiaomi", "versions": [{"status": "affected", "version": "Xiaomi Mi Connect Service3.1.895.10"}]}], "source": "security@xiaomi.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information."}, {"lang": "es", "value": "Existe una vulnerabilidad de protocolo en Xiaomi Mi Connect Service APP. Esta vulnerabilidad se debe a un fallo en la l\u00f3gica de validaci\u00f3n y puede ser explotada por atacantes para filtrar informaci\u00f3n confidencial del usuario."}], "id": "CVE-2024-45361", "lastModified": "2026-06-17T07:54:05.050", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "security@xiaomi.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-45361", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-03-27T13:30:58.813684Z", "version": "2.0.3"}}]}, "published": "2025-03-27T08:15:17.263", "references": [{"source": "security@xiaomi.com", "url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=558"}], "sourceIdentifier": "security@xiaomi.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-319"}], "source": "security@xiaomi.com", "type": "Secondary"}]}

{}

{"created": "2025-06-27T14:10:58.322635+00:00", "updated": "2025-06-27T14:10:58.322698+00:00", "vendors": ["mi", "mi$PRODUCT$xiaomi", "xiaomi", "xiaomi$PRODUCT$mi_connect_service"]}