Sign-up

ID

VAR-201911-1955


TITLE

Xiaomi Mijia Smart Platform Has Information Disclosure Vulnerability

Trust: 0.6

sources: CNVD: CNVD-2019-40291

DESCRIPTION

The Xiaomi Mijia Intelligent Platform is an open platform for Xiaomi for the IoT field, which can realize the interconnection and interconnection of consumer intelligent hardware such as smart home equipment, smart home appliances, smart wearable devices, and smart travel devices. An information disclosure vulnerability exists in the Xiaomi Mijia Smart Platform. Attackers can use this vulnerability to obtain a secret key and control the device to execute arbitrary instructions.

Trust: 0.6

sources: CNVD: CNVD-2019-40291

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2019-40291

AFFECTED PRODUCTS

vendor:xiaomimodel:technology co. ltd.xiaomi mijia intelligent platformscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2019-40291

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2019-40291
value: HIGH

Trust: 0.6

CNVD: CNVD-2019-40291
severity: HIGH
baseScore: 9.4
vectorString: AV:N/AC:L/AU:N/C:C/I:N/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 10.0
impactScore: 9.2
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2019-40291

PATCH

title:Xiaomi Mijia Smart Platform Has Information Disclosure Vulnerabilityurl:https://www.cnvd.org.cn/patchinfo/show/182179

Trust: 0.6

sources: CNVD: CNVD-2019-40291

EXTERNAL IDS

db:CNVDid:CNVD-2019-40291

Trust: 0.6

sources: CNVD: CNVD-2019-40291

SOURCES

db:CNVDid:CNVD-2019-40291

LAST UPDATE DATE

2022-05-04T10:11:12.584000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2019-40291date:2019-11-13T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2019-40291date:2019-11-06T00:00:00