GCVE-110-CERTCC-2019-400865

Advisory PublishedCVSS 6.8/10

Vulnetix · Advisory published May 13, 2019

Cisco's Trust Anchor module (TAm) can be bypassed through manipulating the bitstream of the Field Programmable Gate Array (FPGA). This component handles access control to a hardware component within Cisco's Secure Boot implementations, which affects multiple products that support this functionality. An authenticated, local attacker could bypass the Secure Boot and make persistent changes to the root trust for software integrity. Additionally, Cisco's IOS XE web UI improperly sanitizes user-input, and could allow an authenticated, remote attack to execute commands. An authenticated, remote attacker could execute commands as root on the vulnerable device.

Download JSON Open in Console

Risk Scores

CVSS 2.0

6.8/10

Medium · AV:L/AC:L/Au:S/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_direct_report0

certcc-cvss-temporal-env

temporal_score6.8remediation_levelUreport_confidenceCenvironmental_score6.769545216target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND