CVE-2020-24637

🗓️ 11 Dec 2020 01:33:22Reported by hpeType

Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Exploitation could lead to remote compromise of system integrity by allowing an attacker to load an untrusted or modified kernel in affected Aruba products

Reporter	Title	Published	Views	Family All 8
CNNVD	Aruba Networks ArubaOS Security Vulnerabilities	9 Dec 202000:00	–	cnnvd
CVE	CVE-2020-24637	11 Dec 202001:33	–	cve
EUVD	EUVD-2020-17353	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in ArubaOS	11 Dec 202000:00	–	ncsc
NVD	CVE-2020-24637	11 Dec 202002:15	–	nvd
OSV	CVE-2020-24637	11 Dec 202002:15	–	osv
Prion	Design/Logic Flaw	11 Dec 202002:15	–	prion
RedhatCVE	CVE-2020-24637	9 Jan 202609:49	–	redhatcve

[
  {
    "product": "Aruba 9000 Gateway",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.1.0.1"
      },
      {
        "status": "affected",
        "version": "2.2.0.0 and below"
      }
    ]
  },
  {
    "product": "Aruba 7000 Series Mobility Controllers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.4.23"
      },
      {
        "status": "affected",
        "version": "6.5.4.17"
      },
      {
        "status": "affected",
        "version": "8.2.2.9"
      },
      {
        "status": "affected",
        "version": "8.3.0.13"
      },
      {
        "status": "affected",
        "version": "8.5.0.10"
      },
      {
        "status": "affected",
        "version": "8.6.0.5"
      },
      {
        "status": "affected",
        "version": "8.7.0.0 and below"
      }
    ]
  },
  {
    "product": "Aruba 7200 Series Mobility Controllers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.4.4.23"
      },
      {
        "status": "affected",
        "version": "6.5.4.17"
      },
      {
        "status": "affected",
        "version": "8.2.2.9"
      },
      {
        "status": "affected",
        "version": "8.3.0.13"
      },
      {
        "status": "affected",
        "version": "8.5.0.10"
      },
      {
        "status": "affected",
        "version": "8.6.0.5"
      },
      {
        "status": "affected",
        "version": "8.7.0.0 and below"
      }
    ]
  }
]

Source	Link
support	www.support.hpe.com/hpsc/doc/public/display

11 Dec 2020 01:33Current

7High risk

Vulners AI Score7

EPSS0.01551