CVE-2020-14117

{"id": "CVE-2020-14117", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2022-04-21T18:15:08.490", "references": [{"url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=143", "tags": ["Vendor Advisory"], "source": "security@xiaomi.com"}, {"url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=143", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "A improper permission configuration vulnerability in Xiaomi Content Center APP. This vulnerability is caused by the lack of correct permission verification in the Xiaomi content center APP, and attackers can use this vulnerability to invoke the sensitive component functions of the Xiaomi content center APP."}, {"lang": "es", "value": "Una vulnerabilidad de configuraci\u00f3n de permisos inapropiada en la APP Xiaomi Content Center. Esta vulnerabilidad es causada por una falta de verificaci\u00f3n correcta de permisos en la APP del centro de contenido de Xiaomi, y los atacantes pueden usar esta vulnerabilidad para invocar las funciones de componentes confidenciales de la APP del centro de contenido de Xiaomi"}], "lastModified": "2024-11-21T05:02:41.373", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mi:content_center:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85282E89-1AD7-4BC3-AE7E-0A74F3524E41", "versionEndExcluding": "4.4.11"}], "operator": "OR"}]}], "sourceIdentifier": "security@xiaomi.com"}