CVE Vulnerabilities

CVE-2024-42038

Improper Authentication

Published: Aug 08, 2024 | Modified: Sep 18, 2025
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Vulnerability of PIN enhancement failures in the screen lock module Impact: Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Emui Huawei 13.0.0 (including) 13.0.0 (including)
Emui Huawei 14.0.0 (including) 14.0.0 (including)
Harmonyos Huawei 3.0.0 (including) 3.0.0 (including)
Harmonyos Huawei 4.0.0 (including) 4.0.0 (including)
Harmonyos Huawei 4.2.0 (including) 4.2.0 (including)

Potential Mitigations

References