CVE-2024-45448

Summary

CVE-2024-45448 identifies a page table protection configuration vulnerability in the trusted firmware module, primarily affecting Huawei products. This vulnerability has a medium severity rating with a CVSS base score of 4.1 and can lead to significant confidentiality impacts, as successful exploitation may compromise service confidentiality. Remediation requires addressing the specific configuration issue within the trusted firmware module; however, it necessitates high privileges and has a high attack complexity, making exploitation challenging. The vulnerability is classified as having no integrity or availability impact but poses a serious risk if exploited due to its potential to expose sensitive information. For more details on mitigation steps, users can refer to the Huawei support bulletin here.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.