CVE-2019-1880

CVE-2019-1880 concerns the BIOS upgrade utility in Cisco UCS C-Series Rack Servers. The issue stems from insufficient validation of the BIOS firmware image file, enabling an authenticated, local attacker to run the upgrade with specific options and bypass the firmware signature-verification proce...