CVE-2024-20397: Cisco NX-OS Software Image Verification Bypass Vulnerability
A vulnerability in the bootloader of Cisco NX-OS Software could allow an unauthenticated attacker with physical access to an affected device, or an authenticated, local attacker with administrative credentials, to bypass NX-OS image signature verification. This vulnerability is due to insecure bootloader settings. An attacker could exploit this vulnerability by executing a series of bootloader commands. A successful exploit could allow the attacker to bypass NX-OS image signature verification and load unverified software.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-20397?
CVE-2024-20397 has a critical severity rating due to its potential for allowing unauthorized access to device functionalities.
How do I fix CVE-2024-20397?
To mitigate CVE-2024-20397, ensure that only authorized personnel have physical access to the affected devices and apply any available patches from Cisco.
Who is affected by CVE-2024-20397?
CVE-2024-20397 affects any Cisco NX-OS Software that has not been updated to address this vulnerability.
What types of attacks could exploit CVE-2024-20397?
CVE-2024-20397 could be exploited by an unauthenticated attacker with physical access or an authenticated local attacker with administrative rights.
What are the potential consequences of CVE-2024-20397?
Exploitation of CVE-2024-20397 could lead to the compromise of critical system integrity by allowing bypassing of signature verification on NX-OS images.