CVE-2023-26324

HIGH

Xiaomi GetApps 30.6.0.2 - Verification Bypass Code Execution

Title source: manual

Description

A code execution vulnerability exists in the XiaomiGetApps application product. This vulnerability is caused by the verification logic being bypassed, and an attacker can exploit this vulnerability to execute malicious code.

References (1)

Core 1

Core References

Broken Link

https://https://trust.mi.com/misrc/bulletins/advisory?cveId=544

Scores

CVSS v3 8.8

EPSS 0.0060

EPSS Percentile 44.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-94

Status published

Products (1)

mi/getapps < 30.6.0.2

Published Aug 28, 2024

Tracked Since Feb 18, 2026