CVE-2024-37386

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-37386
An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through 4.7.5, and 4.8.0. Certain manipulations allow restarting in single-user mode despite the activation of secure boot. The following versions fix this: 4.3.27, 4.7.6, and 4.8.2.

4.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.5 / Impact : 3.6

Attack Vector PHYSICAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://advisories.stormshield.eu/2024-017
https://advisories.stormshield.eu/2024-017
Configurations

No configuration.

History

21 Nov 2024, 09:23

Type Values Removed Values Added
References () https://advisories.stormshield.eu/2024-017 - () https://advisories.stormshield.eu/2024-017 -

01 Aug 2024, 13:53

Type Values Removed Values Added
CWE CWE-284
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.2

24 Jul 2024, 16:15

Type Values Removed Values Added
Summary (en) An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through 4.7.5, and 4.8.0. Certain manipulations allow restarting in single-user mode despite the activation of secure boot. The following versions fix this: 4.3.27, 4.7.6, and 4.8.1. (en) An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through 4.7.5, and 4.8.0. Certain manipulations allow restarting in single-user mode despite the activation of secure boot. The following versions fix this: 4.3.27, 4.7.6, and 4.8.2.

16 Jul 2024, 13:43

Type Values Removed Values Added
Summary
  • (es) Se descubrió un problema en Stormshield Network Security (SNS) 4.0.0 a 4.3.25, 4.4.0 a 4.7.5 y 4.8.0. Ciertas manipulaciones permiten reiniciar en modo monousuario a pesar de la activación del arranque seguro. Las siguientes versiones solucionan este problema: 4.3.27, 4.7.6 y 4.8.1.

15 Jul 2024, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-07-15 19:15

Updated : 2024-11-21 09:23

NVD link : CVE-2024-37386

Mitre link : CVE-2024-37386

CVE.ORG link : CVE-2024-37386

JSON object : View

Products Affected

No product.

CWE
CWE-284

Improper Access Control