PT-2024-2750 · Cisco · Cisco Access Point+1

Published 2024-03-27 · Updated 2024-03-28 · CVE-2024-20265

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Cisco Access Point (AP) Software versions (affected versions not specified)

Description The issue is related to a security bypass in the boot process of Cisco Access Point (AP) Software. This could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. The vulnerability exists because unnecessary commands are available during boot time at the physical console. An attacker could exploit this by interrupting the boot process and executing specific commands to bypass the Cisco Secure Boot validation checks and load an image that has been tampered with.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-501

Related Identifiers

BDU:2024-02878

CVE-2024-20265

Affected Products

Cisco Access Point

Cisco Ios Xe

References · 7

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-secureboot-bypass-zT5vJkSD · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20265 · Security Note
• https://bdu.fstec.ru/vul/2024-02878 · Security Note
• https://twitter.com/CVEnew/status/1773096347790639204 · Twitter Post
• https://t.me/cvenotify/74872 · Telegram Post
• https://t.me/cvenotify/74862 · Telegram Post
• https://twitter.com/RedPacketSec/status/1773291342967308641 · Twitter Post