CVE-2024-20688

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Apr 9, 2024
Updated: Jan 8, 2025
CWE ID 121

Summary

CVE-2024-20688 is a newly identified vulnerability affecting Secure Boot, a security feature designed to protect against unauthorized operating system loading. This issue allows an attacker to bypass Secure Boot, enabling them to load an unauthorized operating system or malware. The vulnerability could potentially give an attacker complete control over the compromised system, posing a significant threat to data confidentiality and system integrity. The full extent of this vulnerability is still under investigation, but it is recommended that affected systems be updated as soon as patches become available to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Windows Server 2012
  • Microsoft Windows Server 2012 R2

Affected Vendors

  • Microsoft