CVE-2020-14125 - OpenCVE

A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

AV:N/AC:L/Au:N/C:N/I:N/A:P

Vendors & Products
CPE Configurations

Vendors	Products
Mi	Redmi Note 11 Miui Redmi Note 9t

Configuration 1 [-]

AND

cpe:2.3:o:mi:miui:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:mi:redmi_note_11:-:::::::*
	cpe:2.3:h:mi:redmi_note_9t:-:::::::*

References

Link	Resource
https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=170	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: Xiaomi

Published: 2022-06-08T14:14:57

Updated: 2022-06-08T14:14:57

Reserved: 2020-06-15T00:00:00

Link: CVE-2020-14125

JSON object: View

NVD Information

Status : Analyzed

Published: 2022-06-08T15:15:07.787

Modified: 2022-06-15T02:28:34.360

Link: CVE-2020-14125

JSON object: View

Redhat Information

No data.

CWE

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mi:miui:*:*:*:*:*:*:*:*", "matchCriteriaId": "A65BAE28-2166-43AE-B613-C027C12F6BD6", "versionEndExcluding": "2022.01.26", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:mi:redmi_note_11:-:*:*:*:*:*:*:*", "matchCriteriaId": "2E755713-0566-4138-BA68-19D60B9979FC", "vulnerable": false}, {"criteria": "cpe:2.3:h:mi:redmi_note_9t:-:*:*:*:*:*:*:*", "matchCriteriaId": "E208C9C4-5C77-49DD-89CC-FC3219C3006F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A denial of service vulnerability exists in some Xiaomi models of phones. The vulnerability is caused by out-of-bound read/write and can be exploited by attackers to make denial of service."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de denegaci\u00f3n de servicio en algunos modelos de tel\u00e9fonos Xiaomi. La vulnerabilidad es causada por una lectura/escritura fuera de l\u00edmites y puede ser explotada por atacantes para hacer una denegaci\u00f3n de servicio"}], "id": "CVE-2020-14125", "lastModified": "2022-06-15T02:28:34.360", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-06-08T15:15:07.787", "references": [{"source": "security@xiaomi.com", "tags": ["Vendor Advisory"], "url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=170"}], "sourceIdentifier": "security@xiaomi.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}, {"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}