Lucene search

K
cveHuaweiCVE-2024-42038
HistoryAug 08, 2024 - 10:15 a.m.

CVE-2024-42038

2024-08-0810:15:08
CWE-310
huawei
web.nvd.nist.gov
34
vulnerability
pin enhancement
screen lock
service confidentiality
integrity
availability

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

9.5%

Vulnerability of PIN enhancement failures in the screen lock module
Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

Affected configurations

Vulners
Node
huaweiharmonyosMatch4.2.0
OR
huaweiharmonyosMatch4.0.0
OR
huaweiharmonyosMatch3.0.0
OR
huaweiemuiMatch14.0.0
OR
huaweiemuiMatch13.0.0
VendorProductVersionCPE
huaweiharmonyos4.2.0cpe:2.3:o:huawei:harmonyos:4.2.0:*:*:*:*:*:*:*
huaweiharmonyos4.0.0cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*
huaweiharmonyos3.0.0cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*
huaweiemui14.0.0cpe:2.3:o:huawei:emui:14.0.0:*:*:*:*:*:*:*
huaweiemui13.0.0cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "HarmonyOS",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "4.2.0"
      },
      {
        "status": "affected",
        "version": "4.0.0"
      },
      {
        "status": "affected",
        "version": "3.0.0"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "EMUI",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "14.0.0"
      },
      {
        "status": "affected",
        "version": "13.0.0"
      }
    ]
  }
]

CVSS3

8.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

AI Score

6.9

Confidence

Low

EPSS

0

Percentile

9.5%

Related for CVE-2024-42038