CVE-2020-24637
Severity Score
7.2
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or modified kernel in Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers version(s): 2.1.0.1, 2.2.0.0 and below; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below ; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 and below.
Dos vulnerabilidades en la implementación de ArubaOS GRUB2 permiten a un atacante omitir el arranque seguro. Una explotación con éxito de esta vulnerabilidad podría conllevar a un compromiso remoto de la integridad del sistema al permitir a un atacante cargar un kernel modificado o no confiable en Aruba 9000 Gateway; Aruba 7000 Series Mobility Controllers; Aruba 7200 Series Mobility Controllers versiones: 2.1.0.1, 2.2.0.0 y anteriores; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 y por debajo; 6.4.4.23, 6.5.4.17, 8.2.2.9, 8.3.0.13, 8.5.0.10, 8.6.0.5, 8.7.0.0 y por debajo
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-08-25 CVE Reserved
- 2020-12-11 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | < 8.5.0.11 Search vendor "Arubanetworks" for product "Arubaos" and version " < 8.5.0.11" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7005 Search vendor "Arubanetworks" for product "7005" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | < 8.5.0.11 Search vendor "Arubanetworks" for product "Arubaos" and version " < 8.5.0.11" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7008 Search vendor "Arubanetworks" for product "7008" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | < 8.5.0.11 Search vendor "Arubanetworks" for product "Arubaos" and version " < 8.5.0.11" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7010 Search vendor "Arubanetworks" for product "7010" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | < 8.5.0.11 Search vendor "Arubanetworks" for product "Arubaos" and version " < 8.5.0.11" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7024 Search vendor "Arubanetworks" for product "7024" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | < 8.5.0.11 Search vendor "Arubanetworks" for product "Arubaos" and version " < 8.5.0.11" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7030 Search vendor "Arubanetworks" for product "7030" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | < 8.5.0.11 Search vendor "Arubanetworks" for product "Arubaos" and version " < 8.5.0.11" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7205 Search vendor "Arubanetworks" for product "7205" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | < 8.5.0.11 Search vendor "Arubanetworks" for product "Arubaos" and version " < 8.5.0.11" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7210 Search vendor "Arubanetworks" for product "7210" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | < 8.5.0.11 Search vendor "Arubanetworks" for product "Arubaos" and version " < 8.5.0.11" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7220 Search vendor "Arubanetworks" for product "7220" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | < 8.5.0.11 Search vendor "Arubanetworks" for product "Arubaos" and version " < 8.5.0.11" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7240xm Search vendor "Arubanetworks" for product "7240xm" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | < 8.5.0.11 Search vendor "Arubanetworks" for product "Arubaos" and version " < 8.5.0.11" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7280 Search vendor "Arubanetworks" for product "7280" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.6.0.0 < 8.6.0.6 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.6.0.0 < 8.6.0.6" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7005 Search vendor "Arubanetworks" for product "7005" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.6.0.0 < 8.6.0.6 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.6.0.0 < 8.6.0.6" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7008 Search vendor "Arubanetworks" for product "7008" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.6.0.0 < 8.6.0.6 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.6.0.0 < 8.6.0.6" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7010 Search vendor "Arubanetworks" for product "7010" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.6.0.0 < 8.6.0.6 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.6.0.0 < 8.6.0.6" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7024 Search vendor "Arubanetworks" for product "7024" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.6.0.0 < 8.6.0.6 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.6.0.0 < 8.6.0.6" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7030 Search vendor "Arubanetworks" for product "7030" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.6.0.0 < 8.6.0.6 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.6.0.0 < 8.6.0.6" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7205 Search vendor "Arubanetworks" for product "7205" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.6.0.0 < 8.6.0.6 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.6.0.0 < 8.6.0.6" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7210 Search vendor "Arubanetworks" for product "7210" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.6.0.0 < 8.6.0.6 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.6.0.0 < 8.6.0.6" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7220 Search vendor "Arubanetworks" for product "7220" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.6.0.0 < 8.6.0.6 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.6.0.0 < 8.6.0.6" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7240xm Search vendor "Arubanetworks" for product "7240xm" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.6.0.0 < 8.6.0.6 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.6.0.0 < 8.6.0.6" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7280 Search vendor "Arubanetworks" for product "7280" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.7.0.0 < 8.7.1.0 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.7.0.0 < 8.7.1.0" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7005 Search vendor "Arubanetworks" for product "7005" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.7.0.0 < 8.7.1.0 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.7.0.0 < 8.7.1.0" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7008 Search vendor "Arubanetworks" for product "7008" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.7.0.0 < 8.7.1.0 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.7.0.0 < 8.7.1.0" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7010 Search vendor "Arubanetworks" for product "7010" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.7.0.0 < 8.7.1.0 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.7.0.0 < 8.7.1.0" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7024 Search vendor "Arubanetworks" for product "7024" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.7.0.0 < 8.7.1.0 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.7.0.0 < 8.7.1.0" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7030 Search vendor "Arubanetworks" for product "7030" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.7.0.0 < 8.7.1.0 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.7.0.0 < 8.7.1.0" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7205 Search vendor "Arubanetworks" for product "7205" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.7.0.0 < 8.7.1.0 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.7.0.0 < 8.7.1.0" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7210 Search vendor "Arubanetworks" for product "7210" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.7.0.0 < 8.7.1.0 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.7.0.0 < 8.7.1.0" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7220 Search vendor "Arubanetworks" for product "7220" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.7.0.0 < 8.7.1.0 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.7.0.0 < 8.7.1.0" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7240xm Search vendor "Arubanetworks" for product "7240xm" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Arubaos Search vendor "Arubanetworks" for product "Arubaos" | >= 8.7.0.0 < 8.7.1.0 Search vendor "Arubanetworks" for product "Arubaos" and version " >= 8.7.0.0 < 8.7.1.0" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 7280 Search vendor "Arubanetworks" for product "7280" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Sd-wan Search vendor "Arubanetworks" for product "Sd-wan" | < 2.1.0.2 Search vendor "Arubanetworks" for product "Sd-wan" and version " < 2.1.0.2" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 9004 Search vendor "Arubanetworks" for product "9004" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Sd-wan Search vendor "Arubanetworks" for product "Sd-wan" | < 2.1.0.2 Search vendor "Arubanetworks" for product "Sd-wan" and version " < 2.1.0.2" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 9004-lte Search vendor "Arubanetworks" for product "9004-lte" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Sd-wan Search vendor "Arubanetworks" for product "Sd-wan" | < 2.1.0.2 Search vendor "Arubanetworks" for product "Sd-wan" and version " < 2.1.0.2" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 9012 Search vendor "Arubanetworks" for product "9012" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Sd-wan Search vendor "Arubanetworks" for product "Sd-wan" | >= 2.2.0.0 < 2.2.0.1 Search vendor "Arubanetworks" for product "Sd-wan" and version " >= 2.2.0.0 < 2.2.0.1" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 9004 Search vendor "Arubanetworks" for product "9004" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Sd-wan Search vendor "Arubanetworks" for product "Sd-wan" | >= 2.2.0.0 < 2.2.0.1 Search vendor "Arubanetworks" for product "Sd-wan" and version " >= 2.2.0.0 < 2.2.0.1" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 9004-lte Search vendor "Arubanetworks" for product "9004-lte" | - | - |
Safe
|
| Arubanetworks Search vendor "Arubanetworks" | Sd-wan Search vendor "Arubanetworks" for product "Sd-wan" | >= 2.2.0.0 < 2.2.0.1 Search vendor "Arubanetworks" for product "Sd-wan" and version " >= 2.2.0.0 < 2.2.0.1" | - |
Affected
| in | Arubanetworks Search vendor "Arubanetworks" | 9012 Search vendor "Arubanetworks" for product "9012" | - | - |
Safe
|