CVE-2024-20265 (CVSS 5.9)

Description

A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands are available during boot time at the physical console. An attacker could exploit this vulnerability by interrupting the boot process and executing specific commands to bypass the Cisco Secure Boot validation checks and load an image that has been tampered with. This image would have been previously downloaded onto the targeted device. A successful exploit could allow the attacker to load the image once. The Cisco Secure Boot functionality is not permanently compromised.

Is your site exposed to CVE-2024-20265?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.9

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness Type (CWE)

CWE-501 CWE-501

References

Other References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-secureboot-bypass-zT5vJkSD https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-secureboot-bypass-zT5vJkSD

Frequently Asked Questions

What is CVE-2024-20265? +

A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot functionality and load a software image that has been tampered with on an affected device. This vulnerability exists because unnecessary commands are available during boot time at the physical console. An attacker could exploit this vulnerability by interrupting the boot process and executing specific commands to bypass the Cisco Secure Boot validation checks and load an image that has been tampered with. This image would have been previously downloaded onto the targeted device. A successful exploit could allow the attacker to load the image once. The Cisco Secure Boot functionality is not permanently compromised. It has a CVSS v3.1 base score of 5.9 (MEDIUM).

How severe is CVE-2024-20265? +

CVE-2024-20265 has a CVSS v3.1 score of 5.9 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

How do I check if I'm vulnerable to CVE-2024-20265? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-48938 9.8

go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified …

CVE-2026-44091 9.1

An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new …

CVE-2024-49050 8.8

Visual Studio Code Python Extension Remote Code Execution Vulnerability

CVE-2024-23682 8.2

Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files in …

CVE-2025-49714 7.8

Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.

CVE-2026-33828 7.8

Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally.

CVE-2024-20265