CVEs-PoC/2020/CVE-2020-10648.md

CVE-2020-10648

Description

Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.

POC

Reference

• https://github.com/u-boot/u-boot/commits/master

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/f-secure-foundry/advisories