CVE-2024-20866

Summary

CVE-2024-20866 is a newly disclosed authentication bypass vulnerability affecting Setupwizard prior to the May-2024 Release 1. This issue allows physical attackers to bypass the activation step, potentially granting unauthorized access to the system. Successful exploitation of this vulnerability could enable attackers to install unauthorized software, modify configurations, or gain administrative control. Organizations using the impacted version of Setupwizard are strongly advised to apply the latest security updates to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.