CVE-2024-20688
CVSS 3.1 Score 7.1 of 10 (high)
Details
Summary
CVE-2024-20688 is a newly identified vulnerability affecting Secure Boot, a security feature designed to protect against unauthorized operating system loading. This issue allows an attacker to bypass Secure Boot, enabling them to load an unauthorized operating system or malware. The vulnerability could potentially give an attacker complete control over the compromised system, posing a significant threat to data confidentiality and system integrity. The full extent of this vulnerability is still under investigation, but it is recommended that affected systems be updated as soon as patches become available to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Windows Server 2012
- Microsoft Windows Server 2012 R2
Affected Vendors
- Microsoft