A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device.

This vulnerability exists because unnecessary commands are available during boot time at the physical console. An attacker could exploit this vulnerability by interrupting the boot process and executing specific commands to bypass the Cisco Secure Boot validation checks and load an image that has been tampered with. This image would have been previously downloaded onto the targeted device. A successful exploit could allow the attacker to load the image once. The Cisco Secure Boot functionality is not permanently compromised.

No CVSS v4.0

Attack Vector Physical

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00016.

Exploitation none

Automatable no

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Cisco Cisco IOS XE Software affected
Version Status Constraints
N/A affected —
Cisco Cisco Aironet Access Point Software affected
Version Status Constraints
8.2.100.0 affected —
8.2.130.0 affected —
8.2.111.0 affected —
8.2.110.0 affected —
8.2.121.0 affected —
8.2.141.0 affected —
8.2.151.0 affected —
8.2.160.0 affected —
8.2.161.0 affected —
8.2.164.0 affected —
8.2.166.0 affected —
8.2.170.0 affected —
8.2.163.0 affected —
8.3.102.0 affected —
8.3.111.0 affected —
8.3.112.0 affected —
8.3.121.0 affected —
8.3.122.0 affected —
8.3.130.0 affected —
8.3.131.0 affected —
8.3.132.0 affected —
8.3.133.0 affected —
8.3.140.0 affected —
8.3.141.0 affected —
8.3.143.0 affected —
8.3.150.0 affected —
8.3.108.0 affected —
8.3.90.53 affected —
8.3.104.46 affected —
8.3.200.200 affected —
8.3.104.64 affected —
8.3.15.165 affected —
8.3.90.11 affected —
8.3.135.0 affected —
8.3.104.14 affected —
8.3.90.36 affected —
8.3.15.142 affected —
8.3.104.37 affected —
8.3.15.117 affected —
8.3.15.120 affected —
8.3.15.25 affected —
8.3.15.158 affected —
8.3.15.118 affected —
8.3.90.25 affected —
8.3.15.169 affected —
8.3.90.58 affected —
8.4.100.0 affected —
8.4.1.199 affected —
8.4.1.91 affected —
8.4.1.142 affected —
8.4.1.175 affected —
8.4.1.218 affected —
8.4.1.92 affected —
8.5.103.0 affected —
8.5.105.0 affected —
8.5.110.0 affected —
8.5.120.0 affected —
8.5.131.0 affected —
8.5.140.0 affected —
8.5.135.0 affected —
8.5.151.0 affected —
8.5.101.0 affected —
8.5.102.0 affected —
8.5.161.0 affected —
8.5.160.0 affected —
8.5.100.0 affected —
8.5.171.0 affected —
8.5.164.0 affected —
8.5.182.0 affected —
8.5.182.11 ME affected —
8.7.102.0 affected —
8.7.106.0 affected —
8.7.1.16 affected —
8.8.100.0 affected —
8.8.111.0 affected —
8.8.120.0 affected —
8.8.125.0 affected —
8.8.130.0 affected —
8.6.101.0 affected —
8.6.1.84 affected —
8.6.1.70 affected —
8.6.1.71 affected —
8.9.100.0 affected —
8.9.111.0 affected —
8.10.105.0 affected —
8.10.111.0 affected —
8.10.130.0 affected —
8.10.112.0 affected —
8.10.122.0 affected —
8.10.113.0 affected —
8.10.121.0 affected —
8.10.141.0 affected —
8.10.142.0 affected —
8.10.151.0 affected —
8.10.150.0 affected —
8.10.171.0 affected —
8.10.181.0 affected —
8.10.182.0 affected —
8.10.161.0 affected —
8.10.170.0 affected —
8.10.183.0 affected —
8.10.162.0 affected —
8.10.185.0 affected —
Cisco Cisco Business Wireless Access Point Software affected
Version Status Constraints
10.0.1.0 affected —
10.0.2.0 affected —
10.1.1.0 affected —
10.1.2.0 affected —
10.2.1.0 affected —
10.2.2.0 affected —
10.3.1.0 affected —
10.3.1.1 affected —
10.3.2.0 affected —
10.4.1.0 affected —
10.4.2.0 affected —
10.6.1.0 affected —
10.6.2.0 affected —
10.7.1.0 affected —
10.8.1.0 affected —
10.5.2.0 affected —
Cisco Cisco Aironet Access Point Software (IOS XE Controller) affected
Version Status Constraints
16.10.1e affected —
16.10.1 affected —
17.1.1t affected —
17.1.1s affected —
17.1.1 affected —
16.11.1a affected —
16.11.1 affected —
16.11.1c affected —
16.11.1b affected —
16.12.1s affected —
16.12.4 affected —
16.12.1 affected —
16.12.2s affected —
16.12.1t affected —
16.12.4a affected —
16.12.5 affected —
16.12.3 affected —
16.12.6 affected —
16.12.8 affected —
16.12.7 affected —
16.12.6a affected —
17.3.1 affected —
17.3.2a affected —
17.3.3 affected —
17.3.4 affected —
17.3.5 affected —
17.3.2 affected —
17.3.4c affected —
17.3.5a affected —
17.3.5b affected —
17.3.6 affected —
17.2.1 affected —
17.2.1a affected —
17.2.3 affected —
17.2.2 affected —
17.5.1 affected —
17.4.1 affected —
17.4.2 affected —
17.6.1 affected —
17.6.2 affected —
17.6.3 affected —
17.6.4 affected —
17.6.5 affected —
17.6.6a affected —
17.6.5a affected —
17.10.1 affected —
17.9.1 affected —
17.9.2 affected —
17.9.3 affected —
17.7.1 affected —
17.8.1 affected —
17.11.1 affected —

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Cisco Subscribe
Aironet Access Point Software Subscribe
Business Wireless Access Point Software Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2024-17980 A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands are available during boot time at the physical console. An attacker could exploit this vulnerability by interrupting the boot process and executing specific commands to bypass the Cisco Secure Boot validation checks and load an image that has been tampered with. This image would have been previously downloaded onto the targeted device. A successful exploit could allow the attacker to load the image once. The Cisco Secure Boot functionality is not permanently compromised.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-secureboot-bypass-zT5vJkSD cve-icon cve-icon
History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-08-01T21:52:31.616Z

Reserved: 2023-11-08T15:08:07.624Z

Link: CVE-2024-20265

cve-icon Vulnrichment

Updated: 2024-08-01T15:33:29.551Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-03-27T17:15:51.113

Modified: 2024-11-21T08:52:09.003

Link: CVE-2024-20265

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses