CVE-2019-1736

🗓️ 23 Sep 2020 00:26:09Reported by ciscoType

A vulnerability in Cisco UCS C-Series Rack Servers firmware could allow attackers to bypass UEFI Secure Boot validation checks and load compromised software

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2019-1736	23 Sep 202007:55	–	circl
Cisco	Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability	19 Feb 202016:00	–	cisco
CNVD	Cisco UCS C-Series Data Forgery Vulnerability	20 Feb 202000:00	–	cnvd
Cvelist	CVE-2019-1736 Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability	23 Sep 202000:26	–	cvelist
EUVD	EUVD-2019-10293	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1736	23 Sep 202001:15	–	nvd
Prion	Input validation	23 Sep 202001:15	–	prion
Vulnrichment	CVE-2019-1736 Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability	23 Sep 202000:26	–	vulnrichment

NVD

Node

cisco fmc1000-k9_biosRange<4.0.1f.0

AND

cisco fmc1000-k9_firmwareRange<4.0.2h

Node

cisco fmc2500-k9_biosRange<4.0.1f.0

AND

cisco fmc2500-k9_firmwareRange<4.0.2h

Node

cisco fmc4500-k9_biosRange<4.0.1f.0

AND

cisco fmc4500-k9_firmwareRange<4.0.2h

Node

cisco sns-3515-k9_biosRange<4.0.2d

AND

cisco sns-3515-k9_firmwareRange<4.0.2h

Node

cisco sns-3595-k9_biosRange<4.0.2d

AND

cisco sns-3595-k9_firmwareRange<4.0.2h

Node

cisco sns-3615-k9_biosRange<4.0.1i

AND

cisco sns-3615-k9_firmwareRange<4.0.1g

Node

cisco sns-3655-k9_biosRange<4.0.1i

AND

cisco sns-3655-k9_firmwareRange<4.0.1g

Node

cisco sns-3695-k9_biosRange<4.0.1i

AND

cisco sns-3695-k9_firmwareRange<4.0.1g

Node

cisco tg5004-k9_biosRange<4.0.2d

AND

cisco tg5004-k9_firmwareRange<4.0.2h

Node

cisco tg5004-k9-rf_biosRange<4.0.2d

AND

cisco tg5004-k9-rf_firmwareRange<4.0.2h

Node

cisco identity_services_engineMatch2.4(0.357)

cisco identity_services_engineMatch2.6(0.156)

cisco unified_computing_systemMatch3.2(3h)c

[
  {
    "product": "Cisco Identity Services Engine Software",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200219-ucs-boot-bypass

21 Nov 2024 04:37Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.6

CVSS 26.9

CVSS 36.2

EPSS0.00033

SSVC

CWE-347