Required CVE Record Information
Description
The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.
CVSS 1 Total
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 5.1 | MEDIUM | 4.0 | CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Credits
- The Michigan State Police Michigan Cyber Command Center (MC3) finder
References 1 Total
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19 government-resource
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 1 Total
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-165-19 government-resourcex_transferred