Secure Boot Bypass Vulnerability Affects Multiple Versions of Stormshield Network Security
CVE-2024-37386

4.2MEDIUM

Key Information:

Vendor

Stormshield Network Security

Vendor
CVE Published:
15 July 2024

What is CVE-2024-37386?

An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through 4.7.5, and 4.8.0. Certain manipulations allow restarting in single-user mode despite the activation of secure boot. The following versions fix this: 4.3.27, 4.7.6, and 4.8.2.

References

https://advisories.stormshield.eu/2024-017

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Physical
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.