CVE-2024-28897: Secure Boot Security Feature Bypass Vulnerability

CVE-2024-28897 PUBLISHED CVSS 6.8 MEDIUM

Secure Boot Security Feature Bypass Vulnerability

Reported by microsoft · Published April 9, 2024

Secure Boot Security Feature Bypass Vulnerability

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

CVSS 3.1

6.8

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Vendor	Product	Versions
Microsoft	Windows 10 Version 1809	10.0.17763.0
Microsoft	Windows 10 Version 1809	10.0.0
Microsoft	Windows Server 2019	10.0.17763.0
Microsoft	Windows Server 2019 (Server Core installation)	10.0.17763.0
Microsoft	Windows Server 2022	10.0.20348.0
Microsoft	Windows 11 version 21H2	10.0.0
Microsoft	Windows 10 Version 21H2	10.0.19043.0
Microsoft	Windows 11 version 22H2	10.0.22621.0
Microsoft	Windows 10 Version 22H2	10.0.19045.0
Microsoft	Windows 11 version 22H3	10.0.22631.0
Microsoft	Windows 11 Version 23H2	10.0.22631.0
Microsoft	Windows Server 2022, 23H2 Edition (Server Core installation)	10.0.25398.0
Microsoft	Windows 10 Version 1507	10.0.10240.0
Microsoft	Windows 10 Version 1607	10.0.14393.0
Microsoft	Windows Server 2016	10.0.14393.0
Microsoft	Windows Server 2016 (Server Core installation)	10.0.14393.0
Microsoft	Windows Server 2012	6.2.9200.0
Microsoft	Windows Server 2012 (Server Core installation)	6.2.9200.0
Microsoft	Windows Server 2012 R2	6.3.9600.0
Microsoft	Windows Server 2012 R2 (Server Core installation)	6.3.9600.0

…and 33 more

The same record, from the CLI:

vulnetix vdb vuln CVE-2024-28897
vulnetix vdb fixes CVE-2024-28897

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-28897/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart