Permission Control Vulnerability in Huawei Connectivity Module
CVE-2024-56440

7.5HIGH

Key Information:

Vendor
Huawei
Status
Harmonyos
Emui
Vendor
CVE Published:
8 January 2025

Summary

A permission control vulnerability exists in Huawei's Connectivity module that may allow unauthorized access to certain features. Successful exploitation could lead to abnormal functionality of these features, posing potential risks to user privacy and system integrity.

Affected Version(s)

EMUI 14.0.0

EMUI 13.0.0

HarmonyOS 4.2.0

References

https://consumer.huawei.com/en/support/bulletin/2025/1/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.