VULNERABILITY INTELLIGENCE

CVE-2024-20865

CVSS score6.8 MEDIUM

EPSS probability0.32%

CISA KEVNot currently listed

Published2024-05-07

Last modified2026-06-17

Description

Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images.