CVE-2023-4818

2024-01-1513:28:53

CWE-20

CERT-PL

www.cve.org

pax a920

bootloader

vulnerability

version check

bug

physical access

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

19.7%

JSON

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used.

The attacker must have physical USB access to the device in order to exploit this vulnerability.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "A920",
    "vendor": "PAX Technology",
    "versions": [
      {
        "lessThan": "A920_AP_Boot_Release_V5.14",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]