CVE-2024-45442

Summary

CVE-2024-45442 identifies a vulnerability in the DownloadProviderMain module related to permission verification for APIs, impacting products from Huawei. Successful exploitation could compromise system availability, posing a medium-level threat with a CVSS score of 5.1. The vulnerability requires no user interaction and can be exploited locally, making it accessible to potential attackers with low complexity. To remediate this issue, organizations are advised to consult the relevant security bulletin provided by Huawei for updates and patches. Failure to address this vulnerability may lead to disruptions in service and operational impact for affected organizations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.