CVE-2024-20265
published 2024-03-27CVE-2024-20265: A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot…
PriorityP432medium5.9CVSS 3.1
AVPACLPRLUINSUCHIHAN
EPSS
0.25%
16.2th percentile
A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device.
This vulnerability exists because unnecessary commands are available during boot time at the physical console. An attacker could exploit this vulnerability by interrupting the boot process and executing specific commands to bypass the Cisco Secure Boot validation checks and load an image that has been tampered with. This image would have been previously downloaded onto the targeted device. A successful exploit could allow the attacker to load the image once. The Cisco Secure Boot functionality is not permanently compromised.
Affected
173 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | access_point | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
| cisco | cisco_aironet_access_point_software | — | — |
CVSS provenance
nvdv3.15.9MEDIUMCVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
vendor_cisco5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Access Point Software Secure Boot Bypass Vulnerability
vendor_cisco·2024-03-27·CVSS 5.9
CVE-2024-20265 [MEDIUM] CWE-501 Cisco Access Point Software Secure Boot Bypass Vulnerability
Cisco Access Point Software Secure Boot Bypass Vulnerability
A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device.
This vulnerability exists because unnecessary commands are available during boot time at the physical console. An attacker could exploit this vulnerability by interrupting the boot process and executing specific commands to bypass the Cisco Secure Boot validation checks and load an image that has been tampered with. This image would have been previously downloaded onto the targeted device. A successful exploit could allow the attacker to load the image once. The Cisco Secure Boot functio
Cisco
Cisco Access Point Software Secure Boot Bypass Vulnerability
vendor_cisco·CVSS 3.1
CVE-2024-20265 Cisco Access Point Software Secure Boot Bypass Vulnerability
CVE-2024-20265: Cisco Access Point Software Secure Boot Bypass Vulnerability
A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands are available during boot time at the physical console. An attacker could exploit this vulnerability by interrupting the boot process and executing specific commands to bypass the Cisco Secure Boot validation checks and load an image that has been tampered with. This image would have been previously downloaded onto the targeted device. A successful exploit could allow the attacker to load the image once. The Cisco Secur
GHSA
GHSA-gqw2-gvrw-vqqg: A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure B
ghsa_unreviewed·2024-03-27
CVE-2024-20265 [MEDIUM] CWE-501 GHSA-gqw2-gvrw-vqqg: A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure B
A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device.
This vulnerability exists because unnecessary commands are available during boot time at the physical console. An attacker could exploit this vulnerability by interrupting the boot process and executing specific commands to bypass the Cisco Secure Boot validation checks and load an image that has been tampered with. This image would have been previously downloaded onto the targeted device. A successful exploit could allow the attacker to load the image once. The Cisco Secure Boot functionality is not permanently compromised.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-03-27
Published