CVE-2019-1649

🗓️ 13 May 2019 19:10:14Reported by ciscoType

Vulnerability in Cisco's Secure Boot implementation allowing local attacker to write modified firmware image to component

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2019-1649	14 May 201911:00	–	circl
Cisco	Cisco Secure Boot Hardware Tampering Vulnerability	13 May 201917:30	–	cisco
Tenable Nessus	Cisco Firepower Threat Defense (FTD) Secure Boot Hardware Tampering Vulnerability (cisco-sa-20190513-secureboot)	23 May 201900:00	–	nessus
Tenable Nessus	Rockwell Automation Allen-Bradley Stratix 5950 Improper Access Control (CVE-2019-1649)	25 Jul 202300:00	–	nessus
Tenable Nessus	Rockwell Automation Allen-Bradley Stratix 5950 Improper Access Control (CVE-2019-1649)	16 Jan 202600:00	–	nessus
Cvelist	CVE-2019-1649 Cisco Secure Boot Hardware Tampering Vulnerability	13 May 201919:10	–	cvelist
EUVD	EUVD-2019-10206	7 Oct 202500:30	–	euvd
ICS	Rockwell Automation Allen-Bradley Stratix 5950	12 Mar 202000:00	–	ics
NVD	CVE-2019-1649	13 May 201919:29	–	nvd
Prion	Input validation	13 May 201919:29	–	prion

NVD

Node

cisco asa_5500_firmwareRange<1.1.15

AND

cisco asa_5506-xMatch-

cisco asa_5506h-xMatch-

cisco asa_5506w-xMatch-

cisco asa_5508-xMatch-

cisco asa_5516-xMatch-

Node

cisco firepower_2100_firmwareRange<2.6.1.134

AND

cisco firepower_2110Match-

cisco firepower_2120Match-

cisco firepower_2130Match-

cisco firepower_2140Match-

Node

cisco firepower_4000_firmwareRange<1.0.18

AND

cisco firepower_4110Match-

cisco firepower_4120Match-

cisco firepower_4140Match-

cisco firepower_4150Match-

Node

cisco firepower_9000_firmwareRange<1.0.18

AND

cisco firepower_9300Match-

Node

cisco ons_15454_mstp_firmwareRange<11.1

AND

cisco ons_15454_mstpMatch-

Node

cisco analog_voice_network_interface_modules_firmware4000_series_isrs

AND

cisco nim-2bri-nt/teMatch-

cisco nim-2foxMatch-

cisco nim-2fxsMatch-

cisco nim-2fxs/4fxoMatch-

cisco nim-2fxs/4fxopMatch-

cisco nim-2fxspMatch-

cisco nim-4bri-nt/teMatch-

cisco nim-4e/mMatch-

cisco nim-4fxoMatch-

cisco nim-4fxsMatch-

cisco nim-4fxspMatch-

Node

cisco integrated_services_router_t1/e1_voice_and_wan_network_interface_modules_firmware4000_series

AND

cisco nim-1ce1t1-priMatch-

cisco nim-1mft-t1/e1Match-

cisco nim-2ce1t1-priMatch-

cisco nim-2mft-t1/e1Match-

cisco nim-4mft-t1/e1Match-

cisco nim-8ce1t1-priMatch-

cisco nim-8mft-t1/e1Match-

Node

cisco supervisor_a+_firmwarenexus_9500

AND

cisco n9k-sup-a+Match-

Node

cisco supervisor_b+_firmwarenexus_9500

AND

cisco n9k-sup-b+Match-

Node

cisco 15454-m-wse-k9_firmwareRange<11.1

AND

cisco 15454-m-wse-k9Match-

Node

cisco ios_xeRange<16.12.1

AND

cisco cbr-8_converged_broadband_routerMatch-

Node

cisco ios_xeRange<16.3.9

cisco ios_xeRange16.4.0–16.6.7

cisco ios_xeRange16.7.0–16.9.4

cisco ios_xeRange16.10.0–16.12.1

AND

cisco nim-1ge-cu-sfpMatch-

cisco nim-2ge-cu-sfpMatch-

cisco sm-x-pvdm-1000Match-

cisco sm-x-pvdm-2000Match-

cisco sm-x-pvdm-3000Match-

cisco sm-x-pvdm-500Match-

Node

cisco iosRange<15.6(3)m7

cisco iosRange15.7–15.7(3)m5

cisco iosRange15.8–15.8(3)m3

cisco iosRange15.9–15.9(3)m

AND

cisco 1120_connected_grid_routerMatch-

cisco 1240_connected_grid_routerMatch-

Node

cisco industrial_security_appliances_3000_firmwareRange<1.0.05

AND

cisco industrial_security_appliances_3000Match-

Node

cisco integrated_services_router_4200_firmwareRange<1.1

AND

cisco 4221_integrated_services_routerMatch-

Node

cisco integrated_services_router_4300_firmwareRange<1.1

AND

cisco 4321_integrated_services_routerMatch-

cisco 4331_integrated_services_routerMatch-

cisco 4351_integrated_services_routerMatch-

Node

cisco integrated_services_router_4400_firmwareRange<1.1

AND

cisco 4431_integrated_services_routerMatch-

cisco 44461_integrated_services_routerMatch-

cisco 4451-x_integrated_services_routerMatch-

Node

cisco iosRange<15.6(3)m6b

cisco iosRange15.7–15.7(3)m4b

cisco iosRange15.8–15.8(3)m2a

AND

cisco 809_industrial_integrated_services_routersMatch-

cisco 829_industrial_integrated_services_routersMatch-

Node

cisco asr_1000_series_firmware

AND

cisco asr_1000-esp100Match-

cisco asr_1000_seriesMatch-

cisco asr1000-2t+20x1geMatch-

cisco asr1000-6tgeMatch-

cisco asr1000-esp200Match-

cisco asr1000-mip100Match-

cisco asr1000-rp3Match-

Node

cisco asr_1001_firmwareMatch16.0.0

AND

cisco asr_1001-hxMatch-

cisco asr_1001-xMatch-

cisco asr_1002-hxMatch-

Node

cisco ios_xeRange<16.2.1

AND

cisco a900-rsp2a-128Match-

cisco a900-rsp2a-64Match-

cisco a900-rsp3c-200Match-

cisco a900-rsp3c-400/wMatch-

cisco asr-920-10sz-pdMatch-

cisco asr-920-12cz-aMatch-

cisco asr-920-12cz-dMatch-

cisco asr-920-12sz-aMatch-

cisco asr-920-12sz-dMatch-

cisco asr-920-12sz-im-ccMatch-

cisco asr-920-24sz-mMatch-

cisco asr-920-24tz-imMatch-

cisco asr-920-24tz-mMatch-

cisco asr-920-4sz-aMatch-

cisco asr-920-4sz-dMatch-

cisco c9300-24pMatch-

cisco c9300-24tMatch-

cisco c9300-24uMatch-

cisco c9300-24uxMatch-

cisco c9300-48pMatch-

cisco c9300-48tMatch-

cisco c9300-48uMatch-

cisco c9300-48unMatch-

cisco c9300-48uxmMatch-

cisco catalyst_9600_supervisor_engine-1Match-

cisco cbr-ccap-lc-40g-rMatch-

cisco cbr-lc-8d31-16u31Match-

Node

cisco ios_xrMatch7.0.1

AND

cisco a99-16x100ge-x-seMatch-

cisco a99-32x100ge-cmMatch-

cisco a99-32x100ge-trMatch-

cisco a99-rp3-seMatch-

cisco a99-rp3-trMatch-

cisco a9k-16x100ge-cmMatch-

cisco a9k-16x100ge-trMatch-

cisco a9k-rsp5-seMatch-

cisco a9k-rsp5-trMatch-

cisco network_convergence_system_1002Match-

Node

cisco ios_xeRange<15.5(1)sy4

AND

cisco c6800-16p10g-xlMatch-

cisco c6800-32p10g-xlMatch-

cisco c6800-8p10g-xlMatch-

cisco c6800-8p40g-xlMatch-

cisco c6800-sup6t-xlMatch-

cisco c6816-x-leMatch-

cisco c6824-x-le-40gMatch-

cisco c6832-x-leMatch-

cisco c6840-x-le-40gMatch-

Node

cisco ios_xeRange<16.9.4

cisco ios_xeRange16.10–16.12.1

AND

cisco c9500-12qMatch-

cisco c9500-16xMatch-

cisco c9500-24qMatch-

cisco c9500-24y4cMatch-

cisco c9500-32cMatch-

cisco c9500-32qcMatch-

cisco c9500-40xMatch-

cisco c9500-48y4cMatch-

Node

cisco catalyst_9800-40_wireless_controller_firmwareMatch-

AND

cisco catalyst_9800-40_wireless_controllerMatch-

Node

cisco catalyst_9800-80_wireless_controller_firmwareMatch-

AND

cisco catalyst_9800-80_wireless_controllerMatch-

Node

cisco ic3000-k9_firmwareRange<1.0.2

AND

cisco ic3000-k9Match-

Node

cisco nx-osRange<8.4.1

AND

cisco ds-x9334-k9Match-

Node

cisco ncs2k-mr-mxp-k9_firmwareRange<11.1

AND

cisco ncs2k-mr-mxp-k9Match-

Node

cisco ios_xrMatch7.1.1

AND

cisco nc55-24h12f-seMatch-

cisco nc55-36x100g-a-seMatch-

cisco nc55-36x100g-sMatch-

cisco nc55-5504-fcMatch-

cisco nc55-5516-fcMatch-

cisco nc55-6x200-dwdm-sMatch-

cisco nc55-mod-a-sMatch-

cisco ncs-5501Match-

cisco ncs-5501-seMatch-

cisco ncs-5502Match-

cisco ncs-5502-seMatch-

cisco ncs-55a1-24hMatch-

cisco ncs-55a1-36h-sMatch-

cisco ncs-55a1-36h-seMatch-

cisco ncs-55a2-mod-hd-sMatch-

cisco ncs-55a2-mod-hx-sMatch-

cisco ncs-55a2-mod-sMatch-

cisco ncs-55a2-mod-se-h-sMatch-

cisco ncs-55a2-mod-se-sMatch-

cisco network_convergence_system_5001Match-

cisco network_convergence_system_5002Match-

Node

cisco nx-osRange<9.3(2)

AND

cisco n3k-c31108pc-vMatch-

cisco n3k-c31108tc-vMatch-

cisco n3k-c3132c-zMatch-

cisco n3k-c3264c-eMatch-

cisco n9k-c92300ycMatch-

cisco n9k-c93108tc-exMatch-

cisco n9k-c93108tc-fxMatch-

cisco n9k-c93180lc-exMatch-

cisco n9k-c93180yc-exMatch-

cisco n9k-c93180yc-fxMatch-

cisco n9k-c93240yc-fx2Match-

cisco n9k-c9348gc-fxpMatch-

Node

cisco nx-osRange<8.4.1

AND

cisco ds-x9648-1536k9Match-

cisco n3k-c3264c-eMatch-

cisco n77-m312cq-26lMatch-

cisco n77-m348xp-23lMatch-

cisco n77-sup3eMatch-

cisco n7k-m324fq-25lMatch-

cisco n7k-m348xp-25lMatch-

Node

cisco sm-x-1t3/e3_firmwareMatch-

AND

cisco sm-x-1t3/e3Match-

Node

cisco encs_5100_firmwareMatch-

AND

cisco encs_5100Match-

Node

cisco encs_5400_firmwareMatch-

AND

cisco encs_5400Match-

[
  {
    "product": "Cisco Routers",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "16.12.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
kb	www.kb.cert.org/vuls/id/400865
us-cert	www.us-cert.gov/ics/advisories/icsa-20-072-03
securityfocus	www.securityfocus.com/bid/108350
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot

21 Nov 2024 04:37Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.7

CVSS 27.2

CVSS 36.7

EPSS0.00383

SSVC