Vulnerability · Published Mar 27, 2025 · Assigned by Xiaomi
CVE-2024-45361Mi Connect Service APP protocol flaws lead to leaking sensitive user information
Medium 6.5
In plain English
A medium-severity security flaw in Xiaomi Mi Connect Service from Xiaomi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.2%top 93.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Xiaomi | Xiaomi Mi Connect Service | Xiaomi Mi Connect Service3.1.895.10 |
Weakness: CWE-319 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N