CVE-2024-36180: 
Adobe Experience Manager vulnerability analysis and mitigation

A vulnerability in the bootloader of Cisco NX-OS Software could allow an unauthenticated attacker with physical access to an affected device, or an authenticated, local attacker with administrative credentials, to bypass NX-OS image signature verification. This vulnerability is tracked as CVE-2024-36180 and affects various Cisco MDS, Nexus, and UCS Fabric Interconnect platforms that support secure boot technology (Cisco Advisory).

The vulnerability stems from insecure bootloader settings in affected devices. The vulnerability has been assigned a CVSS score of 5.2 (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:X/RL:X/RC:X). The vulnerability specifically affects the secure boot technology implementation in various Cisco platforms (Cisco Advisory).

A successful exploitation of this vulnerability could allow an attacker to bypass NX-OS image signature verification and load unverified software. This could potentially lead to the execution of unauthorized or malicious code on the affected devices (Cisco Advisory).

The vulnerability can be exploited by executing a series of bootloader commands. This requires either physical access to the affected device or administrative credentials for local access. As of the advisory publication, Cisco PSIRT is not aware of any public announcements or malicious use of this vulnerability (Cisco Advisory).

Cisco has released software updates that address this vulnerability. There are no workarounds available. The fix requires a BIOS update on affected platforms running Cisco NX-OS Software. Different upgrade procedures are required depending on the platform type and mode of operation (Cisco Advisory).