Approved changes feed: RSS · Atom

cpe:2.3:o:mi:mix_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorMi (60a5be67-ae7d-588b-8dcf-30a3da19041f)
ProductMix Firmware (4057c2ba-608c-525a-84d0-425c845bd5e0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-15427 vulnerable 2026-06-08 05:12:57.389437 Details available
The Xiaomi Mi Mix Android device with a build fingerprint of Xiaomi/lithium/lithium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app with a package name of com.miui.powerkeeper app (versionCode=40000, versionName=4.0.00) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
Published: 2019-11-14T16:26:42.000Z
Updated: 2024-08-05T00:49:13.514Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.