CVE-2024-20301

Summary

CVE-2024-20301 is a vulnerability affecting Cisco Duo Authentication for Windows Logon and RDP. It allows an authenticated, physical attacker to bypass secondary authentication and gain unauthorized access to an affected Windows device. This occurs due to a failure to invalidate locally created trusted sessions after a reboot. An attacker with primary user credentials can exploit this vulnerability by attempting to authenticate to the device, potentially granting them access without valid permissions. This issue poses a significant risk, particularly in environments where physical security is not adequately maintained. It is crucial for organizations using Cisco Duo Authentication to apply the available patch as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.