Description
A code execution vulnerability exists in the Xiaomi shop applicationproduct. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code.
Published: 2025-03-27
Score: 4.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-8289 A code execution vulnerability exists in the Xiaomi shop applicationproduct. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code.
History

Thu, 27 Mar 2025 14:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 27 Mar 2025 06:45:00 +0000

Type Values Removed Values Added
Description A code execution vulnerability exists in the Xiaomi shop applicationproduct. The vulnerability is caused by improper input validation and can be exploited by attackers to execute malicious code.
Title xiaomi shop application Webview has code execution vulnerability
Weaknesses CWE-346
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: Xiaomi

Published:

Updated: 2025-03-27T13:37:21.226Z

Reserved: 2024-08-28T02:24:34.839Z

Link: CVE-2024-45354

cve-icon Vulnrichment

Updated: 2025-03-27T13:37:17.945Z

cve-icon NVD

Status : Deferred

Published: 2025-03-27T07:15:38.507

Modified: 2026-04-15T00:35:42.020

Link: CVE-2024-45354

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses