CVE-2024-45361

—

CVSS 3.1

6.5 medium

EPSS

<1%p6

Published

Mar 27, 2025 (Mar 27, 2025)

Modified

Jun 17, 2026

Description

A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information.

Weakness: CWE-319
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.