CVE-2019-1736

🗓️ 23 Sep 2020 00:26:09Reported by ciscoType

A vulnerability in Cisco UCS C-Series Rack Servers firmware could allow attackers to bypass UEFI Secure Boot validation checks and load compromised software

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the Cisco UCS Series C microprogramming software’s BIOS update tool allows a hacker to load a malicious software image onto a vulnerable device.	20 Mar 202000:00	–	bdu_fstec
Circl	CVE-2019-1736	23 Sep 202007:55	–	circl
Cisco	Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability	19 Feb 202016:00	–	cisco
CNVD	Cisco UCS C-Series Data Forgery Vulnerability	20 Feb 202000:00	–	cnvd
Cvelist	CVE-2019-1736 Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability	23 Sep 202000:26	–	cvelist
EUVD	EUVD-2019-10293	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1736	23 Sep 202001:15	–	nvd
OSV	CVE-2019-1736	23 Sep 202001:15	–	osv
Prion	Input validation	23 Sep 202001:15	–	prion
Vulnrichment	CVE-2019-1736 Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability	23 Sep 202000:26	–	vulnrichment

NVD

Node

cisco fmc1000-k9_biosRange<4.0.1f.0

AND

cisco fmc1000-k9_firmwareRange<4.0.2h

Node

cisco fmc2500-k9_biosRange<4.0.1f.0

AND

cisco fmc2500-k9_firmwareRange<4.0.2h

Node

cisco fmc4500-k9_biosRange<4.0.1f.0

AND

cisco fmc4500-k9_firmwareRange<4.0.2h

Node

cisco sns-3515-k9_biosRange<4.0.2d

AND

cisco sns-3515-k9_firmwareRange<4.0.2h

Node

cisco sns-3595-k9_biosRange<4.0.2d

AND

cisco sns-3595-k9_firmwareRange<4.0.2h

Node

cisco sns-3615-k9_biosRange<4.0.1i

AND

cisco sns-3615-k9_firmwareRange<4.0.1g

Node

cisco sns-3655-k9_biosRange<4.0.1i

AND

cisco sns-3655-k9_firmwareRange<4.0.1g

Node

cisco sns-3695-k9_biosRange<4.0.1i

AND

cisco sns-3695-k9_firmwareRange<4.0.1g

Node

cisco tg5004-k9_biosRange<4.0.2d

AND

cisco tg5004-k9_firmwareRange<4.0.2h

Node

cisco tg5004-k9-rf_biosRange<4.0.2d

AND

cisco tg5004-k9-rf_firmwareRange<4.0.2h

Node

cisco identity_services_engineMatch2.4(0.357)

cisco identity_services_engineMatch2.6(0.156)

cisco unified_computing_systemMatch3.2(3h)c

[
  {
    "product": "Cisco Identity Services Engine Software",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200219-ucs-boot-bypass

17 Jun 2026 02:29Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.6

CVSS 26.9

CVSS 36.2

EPSS0.00247

SSVC

CWE-347