Security Advisory

CVE-2020-14121

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-04-21 17:25:10
Last updated 2024-08-04 12:39:35
Assigner Xiaomi
CVSS score not scored
State PUBLISHED

Description

A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of the products being bypassed, and an attacker can exploit the vulnerability to perform a local silent installation.