CVE-2024-57960

Input verification vulnerability in the ExternalStorageProvider module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.7 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
huaweiCNA
7.7 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 8%
VendorProductVersion
huaweiemui
13.0.0
huaweiemui
14.0.0
huaweiharmonyos
3.0.0
huaweiharmonyos
3.1.0
huaweiharmonyos
4.0.0
huaweiharmonyos
4.2.0
huaweiharmonyos
4.3.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://consumer.huawei.com/en/support/bulletin/2025/2/