CVE-2024-56439
Published: 08 January 2025
Summary
CVE-2024-56439 is a high-severity Missing Encryption of Sensitive Data (CWE-311) vulnerability in Huawei Harmonyos. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 13.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 AC-3 (Access Enforcement) and IA-2 (Identification and Authentication (Organizational Users)).
Threat & Defense at a Glance
Threat & Defense Details
Mitigating Controls (NIST 800-53 r5)AI
Enforces approved authorizations for logical access to information and system resources, directly addressing the access control vulnerability in the identity authentication module.
Implements identification and authentication for organizational users, strengthening the flawed identity authentication module against high-privilege local exploitation.
Enforces least privilege to restrict high-privilege (PR:H) accounts, limiting the scope and impact of exploitation leading to confidentiality violations.
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Access control flaw in identity authentication module enables local high-privileged exploitation leading to scope change and full CIA impact, directly mapping to privilege escalation via vulnerability.
NVD Description
Access control vulnerability in the identity authentication module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Deeper analysisAI
CVE-2024-56439, published on 2025-01-08, is an access control vulnerability (CWE-311) in the identity authentication module. It carries a CVSS v3.1 base score of 7.5 (AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) and is associated with NVD-CWE-Other.
The vulnerability can be exploited by a local attacker with high privileges who overcomes high attack complexity, requiring no user interaction. Successful exploitation changes the scope and leads to high impacts on confidentiality, integrity, and availability, potentially affecting service confidentiality.
Mitigation details are provided in the Huawei security bulletin at https://consumer.huawei.com/en/support/bulletin/2025/1/.
Details
- CWE(s)