CVE-2024-57954
Published: 06 February 2025
Description
Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Security Summary
CVE-2024-57954 is a permission verification vulnerability in the media library module, classified under CWE-285 (Improper Authorization). Published on 2025-02-06, it carries a CVSS v3.1 base score of 6.2 (AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), indicating medium severity with high impact on confidentiality but no impact on integrity or availability.
A local attacker requires no privileges, low attack complexity, and no user interaction to exploit the vulnerability. Successful exploitation allows access to confidential service data, potentially compromising sensitive information within the affected media library module.
Mitigation details are provided in the Huawei support bulletin at https://consumer.huawei.com/en/support/bulletin/2025/2/. Security practitioners should consult this advisory for patching instructions and workarounds applicable to affected Huawei products.
Details
- CWE(s)