Protocol Flaw in Xiaomi Mi Connect Service App Exposes User Data
CVE-2024-45361

6.5MEDIUM

Key Information:

Vendor

Xiaomi

Status
Xiaomi Mi Connect Service
Vendor
CVE Published:
27 March 2025

What is CVE-2024-45361?

A protocol flaw exists in the Xiaomi Mi Connect Service App, allowing attackers to exploit inadequate validation logic. This vulnerability can lead to unauthorized access and potential leakage of sensitive user information, compromising user data security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Xiaomi Mi Connect Service Xiaomi Mi Connect Service3.1.895.10

References

https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.