Vulnerability Bulletins

Cisco Access Point Software Secure Boot Bypass Vulnerability


System information

   
Affected software Cisco

Description

A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands are available during boot time at the physical console. An attacker could exploit this vulnerability by interrupting the boot process and executing specific commands to bypass the Cisco Secure Boot

More info:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-secureboot-bypass-zT5vJkSD?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Access%20Point%20Software%20Secure%20Boot%20Bypass%20Vulnerability&vs_k=1

Standar resources

Property Value
CVE CVE-2024-20265.

Version history

Version Comments Date
Ministerio de Defensa
CNI
CCN
CCN-CERT