CVE-2024-45354
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Mar 27, 2025
CWE ID 346
Summary
CVE-2024-45354 is a code execution vulnerability identified in the Xiaomi shop application. This issue arises due to insufficient input validation, allowing attackers to inject malicious code and potentially gain unauthorized access to the system. Exploitation of this vulnerability could result in significant security risks, including data theft and system compromise. Users are strongly advised to update their Xiaomi shop application as soon as a patch is available to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.