PT-2024-1083 · Microsoft · Windows 10+4

Zammis Clark · Published 2024-01-09 · Updated 2026-05-12 · CVE-2024-20666

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows 11 (affected versions not specified) Windows 10 (affected versions not specified) Windows Server 2022 (affected versions not specified)

Description A security feature bypass in the BitLocker data protection function allows an attacker with physical access to an unpatched PC to bypass existing security restrictions and encryption.

Recommendations For Windows 11, apply the Latest Cumulative Update (LCU). For Windows 10, install update KB5034441. For Windows Server 2022, install update KB5034439.

Exploit

Fix

RCE

Improper Authentication

Weakness Enumeration

CWE-20

CWE-287

Related Identifiers

BDU:2024-00341

CVE-2024-20666

Affected Products

Bitlocker

Windows

Windows 10

Windows 11

Windows Server 2022

References · 39

• 🔥 https://github.com/nnotwen/Script-For-CVE-2024-20666 · Exploit
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20666 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-20666 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-20666 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20666 · Security Note
• https://bdu.fstec.ru/vul/2024-00341 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-20666 · Security Note
• https://twitter.com/secocyber/status/1745538965334114653 · Twitter Post
• https://twitter.com/JordanTheITguy/status/1745104877397709213 · Twitter Post
• https://twitter.com/endi24/status/1745504373705199705 · Twitter Post
• https://twitter.com/winaero/status/1745856393834275280 · Twitter Post
• https://twitter.com/franze98/status/1745495235398873256 · Twitter Post
• https://twitter.com/CVEnew/status/1744788496664142164 · Twitter Post
• https://twitter.com/edgaraveloso/status/1745050040647782574 · Twitter Post
• https://twitter.com/GRComputers/status/1745522928597205112 · Twitter Post