CVE-2018-18698

Name of the Vulnerable Software and Affected Versions Xiaomi Mi A1 version 8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE

Description An issue was discovered where devices store cleartext Wi-Fi passwords in logcat during the process of setting up the phone as a hotspot.

Recommendations For version 8.1.0/OPM1.171019.026/V9.6.4.0.ODHMIFE, consider restricting access to logcat to minimize the risk of exploitation. As a temporary workaround, avoid setting up the phone as a hotspot until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.