OS Command Injection Vulnerability in EnzoH by Huawei
CVE-2024-58256

4.5MEDIUM

Key Information:

Vendor

Huawei
Status
Enzoh-w5611t
Vendor
CVE Published:
8 August 2025

What is CVE-2024-58256?

The EnzoH product by Huawei is susceptible to an OS command injection vulnerability. This security flaw allows attackers to execute arbitrary commands on the affected system, which can lead to severe repercussions, including unauthorized access and data manipulation. Users are strongly advised to implement the recommended mitigations to safeguard their systems from potential exploitation.

Affected Version(s)

EnzoH-W5611T BIOS 1.07

References

https://www.huawei.com/cn/psirt/security-advisories/2025/...

CVSS V3.1

Score:
4.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-58256 : OS Command Injection Vulnerability in EnzoH by Huawei