6.7 Moyenne

CVE-2020-3455 A vulnerability in the secure boot process of Cisco FXOS Software could allow an authenticated, local attacker to bypass…

Description

A vulnerability in the secure boot process of Cisco FXOS Software could allow an authenticated, local attacker to bypass the secure boot mechanisms. The vulnerability is due to insufficient protections of the secure boot process. An attacker could exploit this vulnerability by injecting code into a specific file that is then referenced during the device boot process. A successful exploit could allow the attacker to break the chain of trust and inject code into the boot process of the device which would be executed at each boot and maintain persistence across reboots.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Firepower Extensible Operating System (FXOS)	Versions non publiées

Références

20201021 Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability tools.cisco.com

Chronologie

Publiée 21 octobre 2020
Dernière modification 13 novembre 2024

Les 15 CVE de Cisco Firepower Extensible Operating System (FXOS) →

CVE-2026-20099 A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could… 6.7 Moyenne CVE-2026-20091 A vulnerability in the web-based management interface of Cisco FXOS Software and Cisco UCS Manager Software could… 4.8 Moyenne CVE-2024-20294 A vulnerability in the Link Layer Discovery Protocol (LLDP) feature of Cisco FXOS Software and Cisco NX-OS Software… 6.6 Moyenne CVE-2023-20234 A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to create a file or… 4.4 Moyenne

Suivre cette CVE