Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability
A vulnerability in the secure boot process of Cisco FXOS Software could allow an authenticated, local attacker to bypass the secure boot mechanisms. The vulnerability is due to insufficient protections of the secure boot process. An attacker could exploit this vulnerability by injecting code into a specific file that is then referenced during the device boot process. A successful exploit could allow the attacker to break the chain of trust and inject code into the boot process of the device which would be executed at each boot and maintain persistence across reboots. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-3455US | high7.8 | — | ||
A vulnerability in the secure boot process of Cisco FXOS Software could allow an authenticated, local attacker to bypass the secure boot mechanisms. The vulnerability is due to ins… | ||||
references
External citations — patches, advisories, analysis.
- Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerabilityself
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-sbbyp-KqP6NgrEexternal
- Cisco Security Vulnerability Policyexternal
- considering software upgradesexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
- https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.htmlexternal
- Cisco Security Advisories pageexternal
remediations (36)
- FixedCisco Firepower Extensible Operating System (FXOS) 2.2.1.63 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.1.70 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.1.70 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.137 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.137 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.17 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.26 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.28 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.28 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.54 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.60 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.83 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.2.2.97 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.110 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.111 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.111 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.130 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.144 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.145 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.155 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.166 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.179 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.56 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.58 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.58 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.88 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.88 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.91 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.3.1.99 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.131 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.131 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.166 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.169 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.169 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.174 when installed on Cisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Firepower Extensible Operating System (FXOS) 2.6.1.192 when installed on Cisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan