CVE-2024-20397
No fix known EPSS <1%CVSS 5.2
A vulnerability in the bootloader of Cisco NX-OS Software could allow an unauthenticated attacker with physical access to an affected device, or an authenticated, local attacker with administrative credentials, to bypass NX-OS image signature verification. This vulnerability is due to insecure bootloader settings. An attacker could exploit this vulnerability by executing a series of bootloader commands. A successful exploit could allow the attacker to bypass NX-OS image signature verification and load unverified software.
Products: Cisco NX-OS Software, Cisco NX-OS System Software in ACI Mode, Cisco Unified Computing System (Managed)