A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code.
References
| Link | Resource |
|---|---|
| https://trust.mi.com/misrc/bulletins/advisory?cveId=545 |
Configurations
No configuration.
History
29 Aug 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code. |
28 Aug 2024, 14:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-94 |
28 Aug 2024, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| Summary | (en) The Xiaomi Security Center expresses heartfelt thanks to Ken Gannon and Ilyes Beghdadi of NCC Group working with Trend Micro Zero Day Initiative! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center (MiSRC) to jointly ensure the safe access of millions of Xiaomi users worldwide Life. |
28 Aug 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code. |
28 Aug 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-08-28 07:15
Updated : 2024-08-29 03:15
NVD link : CVE-2024-45346
Mitre link : CVE-2024-45346
CVE.ORG link : CVE-2024-45346
JSON object : View
Products Affected
No product.
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')