« Volver al listado

CVE-2020-14107

Estado: ModificadaAlta (7.5)—

A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

MI — Xiaomi Mirror Screen

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2020-14107",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "security@xiaomi.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Xiaomi mirror screen",
          "versions": [
            {
              "status": "affected",
              "version": "Xiaomi mirror screen < 12.4.8.2"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-01-18T17:15:08.163",
  "references": [
    {
      "url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=92",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@xiaomi.com"
    },
    {
      "url": "https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=92",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN."
    },
    {
      "lang": "es",
      "value": "Un desbordamiento de pila en el servidor HTTP de Cast puede ser explotado para hacer que la aplicación se bloquee en LAN"
    }
  ],
  "lastModified": "2026-06-17T02:54:14.430",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mi:xiaomi_mirror_screen:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A053378D-2581-4ACF-A857-7D6B4DBDF8F4",
              "versionEndExcluding": "12.4.8.2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@xiaomi.com"
}