description: A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated attacker with physical access to the device to bypass the secure boot functionality.
This vulnerability is due to a logic error in the boot process. An attacker could exploit this vulnerability by injecting malicious code into a specific memory location during the boot process of an affected device. A successful exploit could allow the attacker to execute persistent code at boot time and break the chain of trust.
problem types: Trust Boundary Violation
affected:
{
vendor: Cisco
product: Cisco Adaptive Security Appliance (ASA) Software
versions:
version: 9.17.1, status: affected
version: 9.17.1.9, status: affected
version: 9.17.1.10, status: affected
version: 9.17.1.13, status: affected
version: 9.18.1, status: affected
version: 9.18.1.3, status: affected
}
{
vendor: Cisco
product: Cisco Firepower Threat Defense Software
versions:
version: 7.1.0, status: affected
version: 7.2.0, status: affected
version: 7.2.0.1, status: affected
}
metrics:
format: cvssV3_1
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
baseScore: 6.4
baseSeverity: MEDIUM
attackVector: PHYSICAL
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
]
exploits: The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.