CVE-2024-20456: Medium severity cisco ios xrv 9000 vulnerability

Published Jul 10, 2024

Updated

A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot functionality and load unverified software on an affected device. To exploit this successfully, the attacker must have root-system privileges on the affected device. This vulnerability is due to an error in the software build process. An attacker could exploit this vulnerability by manipulating the system’s configuration options to bypass some of the integrity checks that are performed during the booting process. A successful exploit could allow the attacker to control the boot configuration, which could enable them to bypass of the requirement to run Cisco signed images or alter the security properties of the running system.

Affected Software

60 affected components

Cisco IOS XR Software

All of the following

Cisco IOS XR=24.2.1

Any of the following

Cisco 8011-4g24y4h-i

Cisco 8101-32fh

Cisco 8101-32fh-o

Cisco 8101-32h-o

Cisco 8102-28fh-dpu-o

Cisco 8102-64h

Cisco 8102-64h-o

Cisco 8111-32eh-o

Cisco 8122-64eh-o

Cisco 8122-64ehf-o

Cisco 8201

Cisco 8201-24h8fh

Cisco 8201-32fh

Cisco 8201-32fh-o

Cisco 8202

Cisco 8202-32fh-m

Cisco 8212-48fh-m

Cisco 8404

Cisco 8501-sys-mt

Cisco 8608

Cisco 8700

Cisco 8711-32fh-m

Cisco 8712-mod-m

Cisco 8804

Cisco 8808

Cisco 8812

Cisco 8818

Cisco Ncs 1010

Cisco Ncs 1014

Cisco Ncs 540-12z20g-sys-a

Cisco Ncs 540-12z20g-sys-d

Cisco Ncs 540-24q2c2dd-sys

Cisco Ncs 540-24q8l2dd-sys

Cisco Ncs 540-24z8q2c-sys

Cisco Ncs 540-28z4c-sys-a

Cisco Ncs 540-28z4c-sys-d

Cisco Ncs 540-6z14s-sys-d

Cisco Ncs 540-6z18g-sys-a

Cisco Ncs 540-6z18g-sys-d

Cisco Ncs 540-acc-sys

Cisco Ncs 540-fh-agg

Cisco Ncs 540-fh-csr-sys

Cisco Ncs 540x-12z16g-sys-a

Cisco Ncs 540x-12z16g-sys-d

Cisco Ncs 540x-16z4g8q2c-a

Cisco Ncs 540x-16z4g8q2c-d

Cisco Ncs 540x-16z8q2c-d

Cisco Ncs 540x-4z14g2q-a

Cisco Ncs 540x-4z14g2q-d

Cisco Ncs 540x-6z18g-sys-a

Cisco Ncs 540x-6z18g-sys-d

Cisco Ncs 540x-8z16g-sys-a

Cisco Ncs 540x-8z16g-sys-d

Cisco Ncs 540x-acc-sys

Cisco Ncs 57b1-5dse-sys

Cisco Ncs 57b1-6d24-sys

Cisco Ncs 57c1-48q6-sys

Cisco Ncs 57d2-18dd-sys

Event History

Jul 10, 2024

CVE Published

via MITRE·04:06 PM

Data Sourced

via MITRE·04:06 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-20456?

CVE-2024-20456 is classified as a high-severity vulnerability affecting Cisco IOS XR Software.

How do I fix CVE-2024-20456?

To mitigate CVE-2024-20456, ensure that your Cisco IOS XR Software is updated to the latest version provided by Cisco.

Can CVE-2024-20456 be exploited remotely?

No, CVE-2024-20456 requires local access and high privileges to be exploited.

What impact does CVE-2024-20456 have on Cisco devices?

CVE-2024-20456 allows an authenticated attacker to bypass Secure Boot and load unverified software, risking the integrity of the device.

Which products are affected by CVE-2024-20456?

CVE-2024-20456 specifically affects Cisco IOS XR Software.