CVE-2023-26322

HIGH

Xiaomi GetApps 31.2.5.0 to 32.0.0.1 - Verification Bypass Code Execution

Title source: manual
STIX 2.1

Description

A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code.

References (1)

Core 1

Scores

CVSS v3 8.8
EPSS 0.0073
EPSS Percentile 49.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-94
Status published
Products (1)
mi/getapps 31.2.5.0 - 32.0.0.1
Published Aug 28, 2024
Tracked Since Feb 18, 2026