CVE-2020-14121

MEDIUM

Mi App Store - Incorrect Authorization via Permission Check Bypass

Title source: llm

Description

A business logic vulnerability exists in Mi App Store. The vulnerability is caused by incomplete permission checks of the products being bypassed, and an attacker can exploit the vulnerability to perform a local silent installation.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=146

Scores

CVSS v3 5.5

EPSS 0.0019

EPSS Percentile 8.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Details

CWE

CWE-863

Status published

Products (1)

mi/mi_app_store 4.12.2

Published Apr 21, 2022

Tracked Since Feb 18, 2026