CVE Vulnerabilities

CVE-2024-38279

Authentication Bypass Using an Alternate Path or Channel

Published: Jun 13, 2024 | Modified: Nov 21, 2024
CVSS 3.x
4.6
MEDIUM
Source:
NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

The affected product is vulnerable to an attacker modifying the bootloader by using custom arguments to bypass authentication and gain access to the file system and obtain password hashes.

Weakness

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected Software

Name Vendor Start Version End Version
Vigilant_fixed_lpr_coms_box_firmware Motorola * 3.1.171.9 (including)

Potential Mitigations

References