Unknown
CVE-2019-1736
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
CVE-2019-1736
MITRE ATT&CK
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Topic Tags
Description
A vulnerability in the firmware of the Cisco UCS C-Series Rack Servers could allow an authenticated, physical attacker to bypass Unified Extensible Firmware Interface (UEFI) Secure Boot validation checks and load a compromised software image on an affected device. The vulnerability is due to improper validation of the server firmware upgrade images. An attacker could exploit this vulnerability by installing a server firmware version that would allow the attacker to disable UEFI Secure Boot. A successful exploit could allow the attacker to bypass the signature validation checks that are done by UEFI Secure Boot technology and load a compromised software image on the affected device. A compromised software image is any software image that has not been digitally signed by Cisco.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
General Information
Vendors
- cisco
Products
- fmc1000-k9 bios,
- fmc1000-k9 firmware,
- fmc2500-k9 bios,
- fmc2500-k9 firmware,
- fmc4500-k9 bios,
- fmc4500-k9 firmware,
- identity services engine 2.4(0.357),
- identity services engine 2.6(0.156),
- sns-3515-k9 bios,
- sns-3515-k9 firmware,
- sns-3595-k9 bios,
- sns-3595-k9 firmware,
- sns-3615-k9 bios,
- sns-3615-k9 firmware,
- sns-3655-k9 bios,
- sns-3655-k9 firmware,
- sns-3695-k9 bios,
- sns-3695-k9 firmware,
- tg5004-k9 bios,
- tg5004-k9 firmware,
- tg5004-k9-rf bios,
- tg5004-k9-rf firmware,
- unified computing system 3.2(3h)c
References
Additional Info
Technical Analysis
Report as Emergent Threat Response
Report as Zero-day Exploit
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
