CVE-2024-57962

CVE-2024-57962 is a vulnerability involving incomplete verification information in the VPN service module. It affects Huawei consumer products, as detailed in the vendor's support bulletin, and was published on 2025-02-06. The issue is rated at a CVSS v3.1 base score of 6.1 (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H) and is linked to CWE-701, with successful exploitation potentially impacting availability.

A local attacker with no privileges required can exploit this vulnerability through low-complexity attacks that necessitate user interaction. Upon success, the attacker can achieve high impact on availability and low impact on integrity, with no confidentiality impact.

Huawei has issued a support bulletin at https://consumer.huawei.com/en/support/bulletin/2025/2/ addressing this vulnerability, which provides information on mitigations or patches for affected products.