Authorization bypass through user-controlled key in Microsoft BitLocker

1) Authorization bypass through user-controlled key

EUVDB-ID: #VU88427

Risk: Low

CVSSv4.0: 4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-20665

CWE-ID: CWE-639 - Authorization Bypass Through User-Controlled Key

Exploit availability: No

Description

The vulnerability allows a local user to bypass authentication process.

The vulnerability exists due to authorization bypass through user-controlled key in BitLocker. An administrator with physical access can bypass Secure Boot.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Windows: 10 Mobile - 11

Windows Server: 2012 R2 - 2022 23H2

CPE2.3

• cpe:2.3:o:microsoft:windows:10:Mobile:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows:10:Gold:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows:10:S:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows:10 20H2:10.0.19042.572:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows:10 21H1:10.0.19043.985:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows:10 21H2:10.0.19044.1288:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows:10 22H2:10.0.19045.2130:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows:10 1507:10.0.10240.16405:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows:10 1511:10.0.10586.3:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows:10 1607:10.0.14393.10:*:*:*:*:*:*
• cpe:2.3:o:microsoft:windows_server:*:*:*:*:*:*:*:*

External links

http://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20665

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.