CVE:CVE-2019-1649
CNNVD:CNNVD-201905-340
Cisco proprietary Secure Boot implementation中对硬件组件访问控制处理的逻辑存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。
solution:Upgrade cisco asa_5500_firmware to a higher version than 1.1.15,and avoid the version (,1.1.15); Upgrade cisco firepower_2100_firmware to a higher version than 2.6.1.134,and avoid the version (,2.6.1.134); Upgrade cisco firepower_4000_firmware to a higher version than 1.0.18,and avoid the version (,1.0.18); Upgrade cisco firepower_9000_firmware to a higher version than 1.0.18,and avoid the version (,1.0.18); Upgrade cisco ons_15454_mstp_firmware to a higher version than 11.1,and avoid the version (,11.1); Upgrade cisco analog_voice_network_interface_modules_firmware to a higher version than *; Upgrade cisco integrated_services_router_t1/e1_voice_and_wan_network_interface_modules_firmware to a higher version than *; Upgrade cisco supervisor_a+_firmware to a higher version than *; Upgrade cisco supervisor_b+_firmware to a higher version than *; Upgrade cisco 15454-m-wse-k9_firmware to a higher version than 11.1,and avoid the version (,11.1); Upgrade cisco ios_xe to a higher version than 16.12.1,16.3.9,16.6.7,16.9.4,16.12.1,16.2.1,15.5\(1\sy4,16.9.4,16.12.1,and avoid the version (,16.12.1),(,16.3.9),[16.4.0,16.6.7),[16.7.0,16.9.4),[16.10.0,16.12.1),(,16.2.1),(,15.5\(1\)sy4),(,16.9.4),[16.10,16.12.1); Upgrade cisco ios to a higher version than 15.6\(3\m7,15.7\(3\m5,15.8\(3\m3,15.9\(3\m,15.6\(3\m6b,15.7\(3\m4b,15.8\(3\m2a,and avoid the version (,15.6\(3\)m7),[15.7,15.7\(3\)m5],[15.8,15.8\(3\)m3),[15.9,15.9\(3\)m),(,15.6\(3\)m6b),[15.7,15.7\(3\)m4b],[15.8,15.8\(3\)m2a); Upgrade cisco industrial_security_appliances_3000_firmware to a higher version than 1.0.05,and avoid the version (,1.0.05); Upgrade cisco integrated_services_router_4200_firmware to a higher version than 1.1,and avoid the version (,1.1); Upgrade cisco integrated_services_router_4300_firmware to a higher version than 1.1,and avoid the version (,1.1); Upgrade cisco integrated_services_router_4400_firmware to a higher version than 1.1,and avoid the version (,1.1); Upgrade cisco asr_1000_series_firmware to a higher version than *; Upgrade cisco asr_1001_firmware to a higher version than 16.0.0,and avoid the version 16.0.0; Upgrade cisco ios_xr to a higher version than 7.0.1,7.1.1,and avoid the version 7.0.1,7.1.1; Upgrade cisco catalyst_9800-40_wireless_controller_firmware to a higher version than -; Upgrade cisco catalyst_9800-80_wireless_controller_firmware to a higher version than -; Upgrade cisco ic3000-k9_firmware to a higher version than 1.0.2,and avoid the version (,1.0.2); Upgrade cisco nx-os to a higher version than 8.4.1,9.3\(2\,and avoid the version (,8.4.1),(,9.3\(2\)); Upgrade cisco ncs2k-mr-mxp-k9_firmware to a higher version than 11.1,and avoid the version (,11.1); Upgrade cisco sm-x-1t3/e3_firmware to a higher version than -; Upgrade cisco encs_5100_firmware to a higher version than -; Upgrade cisco encs_5400_firmware to a higher version than -