What is CVE-2020-24637?

CVE-2020-24637 is a high-severity vulnerability in Arubanetworks 7005. CVSS score: 7.2/10. Published 2020-12-11.

How severe is CVE-2020-24637?

High severity. CVSS v3 base score is 7.2 out of 10.

Vulnerability in Arubanetworks 7005

CVE-2020-24637

Two vulnerabilities in ArubaOS GRUB2 implementation allows for an attacker to bypass secureboot. Successful exploitation of this vulnerability this could lead to remote compromise of system integrity by allowing an attacker to load an untr…

EPSS: 0.016 (72.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Arubanetworks 7005
Arubanetworks 7008
Arubanetworks 7010
Arubanetworks 7024
Arubanetworks 7030
Arubanetworks 7205
Arubanetworks 7210
Arubanetworks 7220
Arubanetworks 7240xm
Arubanetworks 7280

References

security-alert@hpe.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-24637?: CVE-2020-24637 is a high-severity vulnerability in Arubanetworks 7005. CVSS score: 7.2/10. Published 2020-12-11.
How severe is CVE-2020-24637?: High severity. CVSS v3 base score is 7.2 out of 10.