First published: Thu Jul 25 2024(Updated: )
Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulnerability will affect availability.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei EMUI | =12.0.0 | |
Huawei EMUI | =13.0.0 | |
Huawei EMUI | =14.0.0 | |
Huawei HarmonyOS | =2.0.0 | |
Huawei HarmonyOS | =2.1.0 | |
Huawei HarmonyOS | =3.0.0 | |
Huawei HarmonyOS | =3.1.0 | |
Huawei HarmonyOS | =4.0.0 | |
Huawei HarmonyOS | =4.2.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2024-39670 has a high severity level due to its potential for privilege escalation.
To fix CVE-2024-39670, ensure that you update to the latest software version released by Huawei for affected models.
CVE-2024-39670 affects Huawei's EMUI versions 12.0.0, 13.0.0, 14.0.0 and HarmonyOS versions 2.0.0 through 4.2.0.
Exploitation of CVE-2024-39670 could lead to unauthorized privilege escalation, impacting the availability of affected devices.
Users of Huawei devices running affected versions of EMUI and HarmonyOS are at risk from CVE-2024-39670.