CVE Vulnerabilities

CVE-2024-42038

Improper Authentication

Published: Aug 08, 2024 | Modified: Sep 18, 2025
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

NameVendorStart VersionEnd Version
EmuiHuawei13.0.0 (including)13.0.0 (including)
EmuiHuawei14.0.0 (including)14.0.0 (including)
HarmonyosHuawei3.0.0 (including)3.0.0 (including)
HarmonyosHuawei4.0.0 (including)4.0.0 (including)
HarmonyosHuawei4.2.0 (including)4.2.0 (including)

Potential Mitigations

References