Cisco Secure Boot Hardware Tampering Vulnerability
A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability affects multiple Cisco products that support hardware-based Secure Boot functionality. The vulnerability is due to an improper check on the area of code that manages on-premise updates to a Field Programmable Gate Array (FPGA) part of the Secure Boot hardware implementation. An attacker with elevated privileges and access to the underlying operating system that is running on the affected device could exploit this vulnerability by writing a modified firmware image to the FPGA. A successful exploit could either cause the device to become unusable (and require a hardware replacement) or allow tampering with the Secure Boot verification process, which under some circumstances may allow the attacker to install and boot a malicious software image. Cisco will release software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"]
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-1649US | medium6.7 | — | ||
A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local att… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Bug Search Toolexternal
- CSCvn77141external
- CSCvn77142external
- CSCvn77143external
- CSCvn77147external
- CSCvn77150external
- CSCvn77151external
- CSCvn77152external
Behebungen (26)
- BehobenCisco 1000 Series Connected Grid Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco 3000 Series Industrial Security Appliances (ISA)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco 4000 Series Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco 5000 Series Enterprise Network Compute System
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco 800 Series Industrial Integrated Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco ASA with FirePOWER Services
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco ASR 1000 Series Aggregation Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco ASR 900 Series Aggregation Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco ASR 9000 Series Aggregation Services Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco ASR 920 Series Aggregation Services Router
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Catalyst 6800 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Catalyst 9500 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower 2100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower 4100 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Firepower 9000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IC3000 Industrial Compute Gateway
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco MDS 9700 Series Multilayer Directors
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco NX-OS System Software in ACI Mode
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Network Convergence System 1000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Network Convergence System 2000 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Network Convergence System 5500 Series
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Nexus 3000 Series Switch
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Nexus 7000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Nexus 9000 Series Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco ONS 15454 Series Multiservice Transport Platforms
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco cBR-8 Converged Broadband Routers
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan