CVE-2024-45355CWE-306

Xiaomi phone framework has unauthorized access vulnerability

Medium · published March 27, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
3.7
In the wild
Unconfirmed
What it is

A unauthorized access vulnerability exists in the Xiaomi phone framework. The vulnerability is caused by improper validation and can be exploited by attackers to Access sensitive methods.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00148 · 3.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-03-27T06:48Z
EPSS history
Timeline
  • 27 MAR 06:48Z
    Xiaomi phone framework has unauthorized access vulnerability
    cvelistv5