CVE-2024-39671: Critical severity emui 5.0 vulnerability
Published Jul 25, 2024
·Updated
Access control vulnerability in the security verification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Affected Software
3 affected components
Huawei Emui=14.0.0
Huawei Harmonyos=4.0.0
Huawei Harmonyos=4.2.0
Event History
Jul 25, 2024
CVE Published
via MITRE·11:54 AM
Data Sourced
via MITRE·11:54 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-39671?
CVE-2024-39671 has a high severity level as it impacts service confidentiality.
2
How does CVE-2024-39671 affect affected Huawei products?
Exploitation of CVE-2024-39671 allows unauthorized access, potentially compromising the confidentiality of sensitive information.
3
Which versions of Huawei software are affected by CVE-2024-39671?
CVE-2024-39671 affects Huawei Emui version 14.0.0 and HarmonyOS versions 4.0.0 and 4.2.0.
4
How can I mitigate the risks of CVE-2024-39671?
To mitigate CVE-2024-39671, users should update their Huawei devices to the latest software versions released by Huawei.
5
What is the cause of CVE-2024-39671?
CVE-2024-39671 is caused by an access control vulnerability within the security verification module of the affected Huawei products.