Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Xiaomi 5S Plus Android device with a build fingerprint of Xiaomi/natrium/natrium:6.0.1/MXB48T/7.1.5:user/release-keys contains a pre-installed app with a package name of com.miui.powerkeeper app (versionCode=40000, versionName=4.0.00) that allows unauthorized wireless settings modification via a confused deputy attack. This capability can be accessed by any app co-located on the device.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Xiaomi 5S Plus 访问控制错误漏洞
Vulnerability Description
Xiaomi 5S Plus是中国小米科技(Xiaomi)公司的一款智能手机。 Xiaomi 5S Plus(build fingerprint:Xiaomi/natrium/natrium:6.0.1/MXB48T/7.1.5:user/release-keys)中的com.miui.powerkeeper app存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。
CVSS Information
N/A
Vulnerability Type
N/A