CVE-2024-56437
Published: 08 January 2025
Description
Vulnerability of input parameters not being verified in the widget framework module Impact: Successful exploitation of this vulnerability may affect availability.
Security Summary
CVE-2024-56437 is a vulnerability involving input parameters not being verified in the widget framework module, classified under CWE-20 (Improper Input Validation) with NVD-CWE-noinfo. This flaw affects availability upon successful exploitation and carries a CVSS v3.1 base score of 5.7 (AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). The CVE was published on 2025-01-08T03:15:08.840.
Attackers on an adjacent network can exploit this vulnerability with low complexity and no required privileges, though user interaction is necessary. Successful exploitation leads to high-impact disruption of availability, such as denial of service, without affecting confidentiality or integrity.
The Huawei consumer support bulletin at https://consumer.huawei.com/en/support/bulletin/2025/1/ provides details on advisories and mitigation measures for this vulnerability.
Details
- CWE(s)