CVE-2024-20301
Medium
Description
A vulnerability in Cisco Duo Authentication for Windows Logon and RDP could allow an authenticated, physical attacker to bypass secondary authentication and access an affected Windows device. This vulnerability is due to a failure to invalidate locally created trusted sessions after a reboot of the affected device. An attacker with primary user credentials could exploit this vulnerability by attempting to authenticate to an affected device. A successful exploit could allow the attacker to access the affected device without valid permissions.
SeverityMedium
CVSS6.2
Exploit probability—
Product
Cisco Duo Authentication For Windows Logon And Rdp
PublishedMar 6, 2024
First seenMar 6, 2024
Weakness typeCWE-287Improper authentication
How to fix
Update
- cisco duo_authentication_for_windows_logon_and_rdp4.3.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco duo_authentication_for_windows_logon_and_rdp | 4.2.0 ≤ v < 4.3.0 | 4.3.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.