PT-2020-5138 · Cisco · Cisco Ftd+1

Published 2020-10-21 · Updated 2023-08-16 · CVE-2020-3458

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions prior to the fixed version Cisco Firepower Threat Defense (FTD) Software for the Firepower 1000 Series and Firepower 2100 Series Appliances versions prior to the fixed version

Description The issue is related to insufficient protections of the secure boot process in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software. An authenticated, local attacker could exploit this by injecting code into specific files referenced during the device boot process, potentially breaking the chain of trust and injecting code into the boot process. This could allow the attacker to maintain persistence across reboots.

Recommendations For Cisco Adaptive Security Appliance (ASA) Software, update to a version that includes the fix for the secure boot mechanism vulnerability. For Cisco Firepower Threat Defense (FTD) Software, update to a version that includes the fix for the secure boot mechanism vulnerability. As a temporary workaround, consider restricting access to the device boot process to minimize the risk of exploitation.

Fix

DoS

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

BDU:2020-05734

CVE-2020-3458

Affected Products

Cisco Asa

Cisco Ftd

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-sbbyp-KqP6NgrE · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-3458 · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-sbbyp-KqP6NgrE · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-3458 · Security Note
• https://bdu.fstec.ru/vul/2020-05734 · Security Note