Cisco Secure Boot Hardware Tampering Vulnerability
A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability affects multiple Cisco products that support hardware-based Secure Boot functionality. The vulnerability is due to an improper check on the area of code that manages on-premise updates to a Field Programmable Gate Array (FPGA) part of the Secure Boot hardware implementation. An attacker with elevated privileges and access to the underlying operating system that is running on the affected device could exploit this vulnerability by writing a modified firmware image to the FPGA. A successful exploit could either cause the device to become unusable (and require a hardware replacement) or allow tampering with the Secure Boot verification process, which under some circumstances may allow the attacker to install and boot a malicious software image. Cisco will release software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"]
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2019-1649US | medium6.7 | — | ||
A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local att… | ||||
references
External citations — patches, advisories, analysis.
- Cisco Bug Search Toolexternal
- CSCvn77141external
- CSCvn77142external
- CSCvn77143external
- CSCvn77147external
- CSCvn77150external
- CSCvn77151external
- CSCvn77152external
remediations (26)
- FixedCisco 1000 Series Connected Grid Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco 3000 Series Industrial Security Appliances (ISA)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco 4000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco 5000 Series Enterprise Network Compute System
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco 800 Series Industrial Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco ASA with FirePOWER Services
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco ASR 1000 Series Aggregation Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco ASR 900 Series Aggregation Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco ASR 9000 Series Aggregation Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco ASR 920 Series Aggregation Services Router
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Catalyst 6800 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Catalyst 9500 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower 2100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco IC3000 Industrial Compute Gateway
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco MDS 9700 Series Multilayer Directors
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco NX-OS System Software in ACI Mode
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Network Convergence System 1000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Network Convergence System 2000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Network Convergence System 5500 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Nexus 3000 Series Switch
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Nexus 7000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco ONS 15454 Series Multiservice Transport Platforms
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco cBR-8 Converged Broadband Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan