CVE-2020-24637

🗓️ 11 Dec 2020 01:33:22Reported by hpeType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 69 Views

Two vulnerabilities in ArubaOS GRUB2 allow secure boot bypass, risking system integrity compromise.

Reporter	Title	Published	Views	Family All 8
CNNVD	Aruba Networks ArubaOS Security Vulnerabilities	9 Dec 202000:00	–	cnnvd
Cvelist	CVE-2020-24637	11 Dec 202001:33	–	cvelist
EUVD	EUVD-2020-17353	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in ArubaOS	11 Dec 202000:00	–	ncsc
NVD	CVE-2020-24637	11 Dec 202002:15	–	nvd
OSV	CVE-2020-24637	11 Dec 202002:15	–	osv
Prion	Design/Logic Flaw	11 Dec 202002:15	–	prion
RedhatCVE	CVE-2020-24637	9 Jan 202609:49	–	redhatcve

NVD

Node

arubanetworks arubaosRange<8.5.0.11

arubanetworks arubaosRange8.6.0.0–8.6.0.6

arubanetworks arubaosRange8.7.0.0–8.7.1.0

AND

arubanetworks 7005Match-

arubanetworks 7008Match-

arubanetworks 7010Match-

arubanetworks 7024Match-

arubanetworks 7030Match-

arubanetworks 7205Match-

arubanetworks 7210Match-

arubanetworks 7220Match-

arubanetworks 7240xmMatch-

arubanetworks 7280Match-

Node

arubanetworks sd-wanRange<2.1.0.2

arubanetworks sd-wanRange2.2.0.0–2.2.0.1

AND

arubanetworks 9004Match-

arubanetworks 9004-lteMatch-

arubanetworks 9012Match-

[
  {
    "product": "Aruba 9000 Gateway",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.1.0.1"
      },
      {
        "status": "affected",
        "version": "2.2.0.0 and below"
      }
    ]
  },
  {
    "product": "Aruba 7000 Series Mobility Controllers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.4.23"
      },
      {
        "status": "affected",
        "version": "6.5.4.17"
      },
      {
        "status": "affected",
        "version": "8.2.2.9"
      },
      {
        "status": "affected",
        "version": "8.3.0.13"
      },
      {
        "status": "affected",
        "version": "8.5.0.10"
      },
      {
        "status": "affected",
        "version": "8.6.0.5"
      },
      {
        "status": "affected",
        "version": "8.7.0.0 and below"
      }
    ]
  },
  {
    "product": "Aruba 7200 Series Mobility Controllers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.4.23"
      },
      {
        "status": "affected",
        "version": "6.5.4.17"
      },
      {
        "status": "affected",
        "version": "8.2.2.9"
      },
      {
        "status": "affected",
        "version": "8.3.0.13"
      },
      {
        "status": "affected",
        "version": "8.5.0.10"
      },
      {
        "status": "affected",
        "version": "8.6.0.5"
      },
      {
        "status": "affected",
        "version": "8.7.0.0 and below"
      }
    ]
  }
]

Source	Link
support	www.support.hpe.com/hpsc/doc/public/display

21 Nov 2024 05:15Current

7High risk

Vulners AI Score7

CVSS 3.17.2

CVSS 29

EPSS0.00524