CVE-2024-45442: High severity emui 5.0 vulnerability

Published Sep 4, 2024

Updated

Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availability.

Affected Software

5 affected components

Huawei Emui=13.0.0

Huawei Emui=14.0.0

Huawei Harmonyos=3.1.0

Huawei Harmonyos=4.0.0

Huawei Harmonyos=4.2.0

Event History

Sep 4, 2024

CVE Published

via MITRE·01:38 AM

Data Sourced

via MITRE·01:38 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-45442?

CVE-2024-45442 has a medium severity rating due to its impact on the availability of affected systems.

How do I fix CVE-2024-45442?

To fix CVE-2024-45442, ensure that your Huawei device is updated to the latest firmware version that addresses the vulnerability.

What products are affected by CVE-2024-45442?

CVE-2024-45442 affects Huawei Emui versions 13.0.0 and 14.0.0, as well as HarmonyOS versions 3.1.0, 4.0.0, and 4.2.0.

What is the nature of the vulnerability in CVE-2024-45442?

CVE-2024-45442 involves a vulnerability in permission verification for APIs within the DownloadProviderMain module.

Can CVE-2024-45442 be exploited remotely?

Yes, successful exploitation of CVE-2024-45442 could potentially allow unauthorized access to resources, affecting system availability.