Vulnerability · Published Mar 27, 2025 · Assigned by Xiaomi
CVE-2024-45352Xiaomi smarthome application Webview has code execution vulnerability
High 8.8
In plain English
A high-severity security flaw in Xiaomi smarthome application from Xiaomi. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.3%top 78.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC
Official description
An code execution vulnerability exists in the Xiaomi smarthome application product. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Xiaomi | Xiaomi smarthome application | Xiaomi smarthome application 10.0.623 |
Weakness: CWE-346 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H