CVE-2024-54121
Published: 08 January 2025
Description
Startup control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.
Security Summary
CVE-2024-54121 is a startup control vulnerability in the ability module, published on 2025-01-08 with a CVSS v3.1 base score of 6.2 (Medium). The vulnerability is associated with CWE-20 (Improper Input Validation) and is detailed in a Huawei consumer support bulletin. Successful exploitation may cause features to perform abnormally, primarily impacting availability.
The attack vector is local (AV:L) with low attack complexity (AC:L), requiring no privileges (PR:N) or user interaction (UI:N), and resulting in unchanged scope (S:U). A local attacker can exploit this to achieve high availability impact (C:N/I:N/A:H), disrupting normal feature operation without compromising confidentiality or integrity.
Mitigation details are provided in the Huawei advisory at https://consumer.huawei.com/en/support/bulletin/2025/1/. Security practitioners should consult this bulletin for patch information and recommended actions specific to affected Huawei devices.
Details
- CWE(s)