CVE-2024-20821

Summary

CVE-2024-20821 is a newly identified vulnerability that allows local attackers to manipulate One-Time Passwords (OTPs) and transition to Return Merchandise Authorization (RMA) mode on a targeted system. This mode disables security features, increasing the risk of unauthorized access. However, to exploit this vulnerability, an attacker must have the required privileges to control the Trusted Execution Environment (TEE). This weakness could result in significant security consequences if left unaddressed.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.