ID
VAR-202010-1024
CVE
CVE-2020-3455
TITLE
Cisco FXOS Software vulnerabilities
Trust: 0.8
DESCRIPTION
A vulnerability in the secure boot process of Cisco FXOS Software could allow an authenticated, local attacker to bypass the secure boot mechanisms. The vulnerability is due to insufficient protections of the secure boot process. An attacker could exploit this vulnerability by injecting code into a specific file that is then referenced during the device boot process. A successful exploit could allow the attacker to break the chain of trust and inject code into the boot process of the device which would be executed at each boot and maintain persistence across reboots. Cisco FXOS There are unspecified vulnerabilities in the software.Information is obtained, information is tampered with, and service is disrupted (DoS) It may be put into a state. Cisco FXOS Software is a set of firewall software that runs in Cisco security devices from Cisco. The process will be executed every time it boots and will remain persistent during reboot
Trust: 2.25
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
AFFECTED PRODUCTS
| vendor: | cisco | model: | firepower extensible operating system | scope: | lt | version: | 2.6.1.214 | Trust: 1.0 |
| vendor: | cisco | model: | firepower extensible operating system | scope: | gte | version: | 2.7 | Trust: 1.0 |
| vendor: | cisco | model: | firepower extensible operating system | scope: | gte | version: | 2.6 | Trust: 1.0 |
| vendor: | cisco | model: | firepower extensible operating system | scope: | lt | version: | 2.4.1.268 | Trust: 1.0 |
| vendor: | cisco | model: | firepower extensible operating system | scope: | lt | version: | 2.7.1.131 | Trust: 1.0 |
| vendor: | シスコシステムズ | model: | cisco firepower extensible operating system | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco firepower extensible operating system | scope: | eq | version: | - | Trust: 0.8 |
| vendor: | cisco | model: | fxos | scope: | - | version: | - | Trust: 0.6 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | |||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-693 | Trust: 1.0 |
| problemtype: | NVD-CWE-Other | Trust: 1.0 |
| problemtype: | Other (CWE-Other) [NVD Evaluation ] | Trust: 0.8 |
THREAT TYPE
local
Trust: 0.6
TYPE
other
Trust: 0.6
PATCH
| title: | cisco-sa-fxos-sbbp-XTuPkYTn | url: | https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-sbbp-XTuPkYTn | Trust: 0.8 |
| title: | Patch for Cisco FXOS Secure Boot Bypass Vulnerability | url: | https://www.cnvd.org.cn/patchInfo/show/242263 | Trust: 0.6 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2020-3455 | Trust: 3.1 |
| db: | JVNDB | id: | JVNDB-2020-012611 | Trust: 0.8 |
| db: | CNVD | id: | CNVD-2020-72732 | Trust: 0.6 |
| db: | NSFOCUS | id: | 50201 | Trust: 0.6 |
| db: | AUSCERT | id: | ESB-2020.3643 | Trust: 0.6 |
| db: | CNNVD | id: | CNNVD-202010-1148 | Trust: 0.6 |
| db: | VULMON | id: | CVE-2020-3455 | Trust: 0.1 |
REFERENCES
| url: | https://nvd.nist.gov/vuln/detail/cve-2020-3455 | Trust: 2.0 |
| url: | https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-fxos-sbbp-xtupkytn | Trust: 1.7 |
| url: | http://www.nsfocus.net/vulndb/50201 | Trust: 0.6 |
| url: | https://www.auscert.org.au/bulletins/esb-2020.3643/ | Trust: 0.6 |
| url: | https://cwe.mitre.org/data/definitions/.html | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
SOURCES
| db: | CNVD | id: | CNVD-2020-72732 |
| db: | VULMON | id: | CVE-2020-3455 |
| db: | JVNDB | id: | JVNDB-2020-012611 |
| db: | CNNVD | id: | CNNVD-202010-1148 |
| db: | NVD | id: | CVE-2020-3455 |
LAST UPDATE DATE
2024-08-14T14:25:36.880000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2020-72732 | date: | 2020-12-19T00:00:00 |
| db: | VULMON | id: | CVE-2020-3455 | date: | 2020-10-28T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-012611 | date: | 2021-05-17T09:06:00 |
| db: | CNNVD | id: | CNNVD-202010-1148 | date: | 2020-11-05T00:00:00 |
| db: | NVD | id: | CVE-2020-3455 | date: | 2020-10-28T20:52:18.793 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2020-72732 | date: | 2020-12-19T00:00:00 |
| db: | VULMON | id: | CVE-2020-3455 | date: | 2020-10-21T00:00:00 |
| db: | JVNDB | id: | JVNDB-2020-012611 | date: | 2021-05-17T00:00:00 |
| db: | CNNVD | id: | CNNVD-202010-1148 | date: | 2020-10-21T00:00:00 |
| db: | NVD | id: | CVE-2020-3455 | date: | 2020-10-21T19:15:16.170 |