Detections
Analytics
Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass (cisco-sa-fxos-sbbp-XTuPkYTn)
high Nessus Plugin ID 141832
Language:
Synopsis
The remote device is missing a vendor-supplied security patch.Description
According to its self-reported version, Cisco Firepower Extensible Operating System (FXOS) is affected by a secure boot bypass vulnerability. The vulnerability is due to insufficient protections of the secure boot process. A local attacker can exploit this vulnerability by injecting code into a specific file that is then referenced during the device boot process. A successful exploit can allow the attacker to break the chain of trust and inject code into the boot process of the device which would be executed at each boot and maintain persistence across reboots.Please see the included Cisco BIDs and Cisco Security Advisory for more information.
Solution
Upgrade to the relevant fixed version referenced in Cisco bug ID CSCvt31171.See Also
Plugin Details
Severity: High
ID: 141832
File Name: cisco-sa-fxos-sbbp-XTuPkYTn.nasl
Version: 1.9
Type: local
Family: CISCO
Published: 10/23/2020
Updated: 3/29/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2020-3455
CVSS v3
Risk Factor: High
Base Score: 7.8
Temporal Score: 6.8
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:cisco:fxos
Required KB Items: installed_sw/FXOS
Exploit Ease: No known exploits are available
Patch Publication Date: 10/21/2020
Vulnerability Publication Date: 10/21/2020
Reference Information
CVE: CVE-2020-3455