CVE-2024-45346CWE-287

GetApps application has code execution vulnerability

High · published August 28, 2024

CVSS v3.1
8.8
EPSS
0%
Percentile
39.6
In the wild
Unconfirmed
What it is

The Xiaomi Security Center expresses heartfelt thanks to Ken Gannon and Ilyes Beghdadi of NCC Group working with Trend Micro Zero Day Initiative! At the same time, we also welcome more outstanding and professional security experts and security teams to join the Mi Security Center (MiSRC) to jointly ensure the safe access of millions of Xiaomi users worldwide Life.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00472 · 39.6th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-08-28T06:44Z
EPSS history
Timeline
  • 28 AUG 06:44Z
    GetApps application has code execution vulnerability
    cvelistv5