CVE-2020-14129

{"id": "CVE-2020-14129", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2022-10-11T20:15:10.267", "references": [{"url": "https://trust.mi.com/misrc/bulletins/advisory?cveId=155", "tags": ["Vendor Advisory"], "source": "security@xiaomi.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A logic vulnerability exists in a Xiaomi product. The vulnerability is caused by an identity verification failure, which can be exploited by an attacker who can obtain a brief elevation of privilege."}, {"lang": "es", "value": "Se presenta una vulnerabilidad l\u00f3gica en un producto de Xiaomi. La vulnerabilidad est\u00e1 causada por un fallo de verificaci\u00f3n de identidad, que puede ser explotado por un atacante que puede obtener una breve elevaci\u00f3n de privilegios"}], "lastModified": "2022-10-13T13:18:03.727", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mi:xiaomi:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F9C6762-9C78-47DC-9306-59762DE70629"}], "operator": "OR"}]}], "sourceIdentifier": "security@xiaomi.com"}