PT-2021-2640 · Cisco · Cisco Ios Xe

X.B · Published 2021-03-24 · Updated 2021-03-29 · CVE-2021-1453

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software for the Cisco Catalyst 9000 Family of switches (affected versions not specified)

Description The issue is related to an improper check in the code function that manages the verification of the digital signatures of system image files during the initial boot process. This could allow an unauthenticated, physical attacker to execute unsigned code at system boot time. An attacker could exploit this by loading unsigned software on an affected device, potentially allowing them to boot a malicious software image or execute unsigned code and bypass the image verification check part of the secure boot process.

Recommendations To resolve the issue, update to a version of Cisco IOS XE Software that addresses this vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

BDU:2021-02158

CVE-2021-1453

Affected Products

Cisco Ios Xe

References · 7

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-cat-verify-BQ5hrXgH · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1453 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-cat-verify-BQ5hrXgH · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02158 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1453 · Security Note
• https://t.me/cvenotify/12250 · Telegram Post
• https://t.me/cvenotify/11898 · Telegram Post