CVE-2023-4818CWE-74

PAX A920 device allows to downgrade bootloader due to a bug in its version check

High · published January 15, 2024

CVSS v3.1
7.6
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used.

The attacker must have physical USB access to the device in order to exploit this vulnerability.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00663 · 51.1th percentile
Weakness
CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Published
2024-01-15T13:28Z
EPSS history
Timeline
  • 15 JAN 13:28Z
    PAX A920 device allows to downgrade bootloader due to a bug in its version check
    cvelistv5