Vulnerability in Xiaomi Mi Connect Service

CVE-2024-45361

A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information.

EPSS: 0.002 (5.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2024-45361?
CVE-2024-45361 is a medium-severity vulnerability in Xiaomi Mi Connect Service, classified under Cleartext Transmission of Sensitive Information. CVSS score: 6.5/10. Published 2025-03-27.
How severe is CVE-2024-45361?
Medium severity. CVSS v3 base score is 6.5 out of 10.