CVE-2020-14114

7.5 highEPSS 0.7%

High (7.5) in mi smarthome. EPSS 0.7% chance of exploitation in the next 30 days.

information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS interfaces, which can be exploited by attackers to leak sensitive information.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
Published: 2022-07-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mi:smarthome

References

https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=277
https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=277

Check your stack JSON