CVE-2020-14103

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Affected software

VendorProductVersions
n/aXiaomi 10Xiaomi 10 MIUI system < 2020.01.15

References

Timeline

Published
Apr 8, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-141048.1A RACE CONDITION on XQBACKUP causes a decompression path error on Xiaomi router AX3600 with ROM version =1.0.50.CVE-2020-141055.5The application in the mobile phone can read the SNO information of the device, Xiaomi 10 MIUI < 2020.01.15.CVE-2020-141065.5The application in the mobile phone can unauthorized access to the list of running processes in the mobile phone, Xiaomi Mobile Phone MIUI <CVE-2020-141077.5A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN.CVE-2020-141097.2There is command injection in the meshd program in the routing system, resulting in command execution under administrator authority on XiaomCVE-2020-14117.8An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaCVE-2020-141107.8AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive information and log in to theCVE-2020-141117.8A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data CVE-2020-141125.3Information Leak Vulnerability exists in the Xiaomi Router AX6000. The vulnerability is caused by incorrect routing configuration. AttackersCVE-2020-141147.5information leakage vulnerability exists in the Xiaomi SmartHome APP. This vulnerability is caused by illegal calls of some sensitive JS intCVE-2020-141159.8A command injection vulnerability exists in the Xiaomi Router AX3600. The vulnerability is caused by a lack of inspection for incoming data CVE-2020-141167.5An intent redirection vulnerability in the Mi Browser product. This vulnerability is caused by the Mi Browser does not verify the validity o