Trust Boundary Violation in Cisco Systems, Inc products - CVE-2024-20265

Vulnerability identifier: #VU87888

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-20265

CWE-ID: CWE-501

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to compromise the target system.

The vulnerability exists due to unnecessary commands are available during boot time at the physical console. An authenticated attacker with physical access can bypass the Cisco Secure Boot functionality and load arbitrary software image on the target device.

Cisco Aironet 1540 Series Access Points
Wide Pluggable Form Factor Wi-Fi 6 AP Module for Industrial Routers
Catalyst 9136 Series Access Points
Aironet 3800 Series Access Points
Aironet 2800 Series Access Points
Aironet 1800 Series Access Points
Aironet 1560 Series Access Points
Catalyst 9115 Series Access Points
Catalyst 9800 Series Wireless Controller Software
Business Wireless Access Point Software
Wireless LAN Controller Software
Catalyst IW6300 Heavy Duty Series Access Points
Catalyst Cellular Gateways
Catalyst 9130AX Series Access Points
Catalyst 9124AX Series
Catalyst 9120AX Series Access Points
Catalyst 9105AX Series Access Points
Business 200 Series Access Points
Business 100 Series Mesh Extenders
Aironet 4800 Access Points
6300 Series Embedded Services Access Points

Install updates from vendor's website.

Catalyst 9800 Series Wireless Controller Software - addressed in versions 17.3.8, 17.6.6, 17.9.4
Business Wireless Access Point Software - addressed in versions 10.6.2.0, 10.9.1.0
Wireless LAN Controller Software - update to 8.10.190.0

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-secureboot-bypass-zT5vJkSD

• Trust Boundary Violation in Cisco Access Point Software