Critical Vulnerabilities in Cisco Products

Critical Vulnerabilities in Cisco Products A high-risk vulnerability in Cisco’s secure boot process was disclosed earlier this week by Cisco and Red Balloon Security and is believed to have affected an estimate 100 or more devices. The vulnerability (CVE-2019-1649) is “in the logic that handles access control to one of the hardware components in Cisco’s proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component.

Read full article on Infosecurity