CVE-2022-20826
Severity Score
6.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated attacker with physical access to the device to bypass the secure boot functionality.
This vulnerability is due to a logic error in the boot process. An attacker could exploit this vulnerability by injecting malicious code into a specific memory location during the boot process of an affected device. A successful exploit could allow the attacker to execute persistent code at boot time and break the chain of trust.
Una vulnerabilidad en la implementación de boot seguro de Cisco Secure Firewalls serie 3100 que ejecutan el Software Cisco Adaptive Security Appliance (ASA) o el Software Cisco Firepower Threat Defense (FTD) podría permitir que un atacante no autenticado con acceso físico al dispositivo omita la funcionalidad de boot seguro. Esta vulnerabilidad se debe a un error lógico en el proceso de boot. Un atacante podría aprovechar esta vulnerabilidad inyectando código malicioso en una ubicación de memoria específica durante el proceso de boot de un dispositivo afectado. Un exploit exitoso podría permitir al atacante ejecutar código persistente en el momento del boot y romper la cadena de confianza.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-11-02 CVE Reserved
- 2022-11-10 CVE Published
- 2024-06-02 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-501: Trust Boundary Violation
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fw3100-secure-boot-5M8mUh26 |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3105 Search vendor "Cisco" for product "Secure Firewall 3105" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3110 Search vendor "Cisco" for product "Secure Firewall 3110" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3120 Search vendor "Cisco" for product "Secure Firewall 3120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3130 Search vendor "Cisco" for product "Secure Firewall 3130" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3140 Search vendor "Cisco" for product "Secure Firewall 3140" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.9 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.9" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3105 Search vendor "Cisco" for product "Secure Firewall 3105" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.9 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.9" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3110 Search vendor "Cisco" for product "Secure Firewall 3110" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.9 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.9" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3120 Search vendor "Cisco" for product "Secure Firewall 3120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.9 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.9" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3130 Search vendor "Cisco" for product "Secure Firewall 3130" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.9 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.9" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3140 Search vendor "Cisco" for product "Secure Firewall 3140" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.10 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.10" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3105 Search vendor "Cisco" for product "Secure Firewall 3105" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.10 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.10" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3110 Search vendor "Cisco" for product "Secure Firewall 3110" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.10 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.10" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3120 Search vendor "Cisco" for product "Secure Firewall 3120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.10 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.10" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3130 Search vendor "Cisco" for product "Secure Firewall 3130" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.10 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.10" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3140 Search vendor "Cisco" for product "Secure Firewall 3140" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.13 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.13" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3105 Search vendor "Cisco" for product "Secure Firewall 3105" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.13 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.13" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3110 Search vendor "Cisco" for product "Secure Firewall 3110" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.13 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.13" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3120 Search vendor "Cisco" for product "Secure Firewall 3120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.13 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.13" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3130 Search vendor "Cisco" for product "Secure Firewall 3130" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.17.1.13 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.17.1.13" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3140 Search vendor "Cisco" for product "Secure Firewall 3140" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.18.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.18.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3105 Search vendor "Cisco" for product "Secure Firewall 3105" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.18.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.18.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3110 Search vendor "Cisco" for product "Secure Firewall 3110" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.18.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.18.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3120 Search vendor "Cisco" for product "Secure Firewall 3120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.18.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.18.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3130 Search vendor "Cisco" for product "Secure Firewall 3130" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.18.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.18.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3140 Search vendor "Cisco" for product "Secure Firewall 3140" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.18.1.3 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.18.1.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3105 Search vendor "Cisco" for product "Secure Firewall 3105" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.18.1.3 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.18.1.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3110 Search vendor "Cisco" for product "Secure Firewall 3110" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.18.1.3 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.18.1.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3120 Search vendor "Cisco" for product "Secure Firewall 3120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.18.1.3 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.18.1.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3130 Search vendor "Cisco" for product "Secure Firewall 3130" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 9.18.1.3 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "9.18.1.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3140 Search vendor "Cisco" for product "Secure Firewall 3140" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.1.0.0 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.1.0.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3105 Search vendor "Cisco" for product "Secure Firewall 3105" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.1.0.0 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.1.0.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3110 Search vendor "Cisco" for product "Secure Firewall 3110" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.1.0.0 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.1.0.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3120 Search vendor "Cisco" for product "Secure Firewall 3120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.1.0.0 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.1.0.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3130 Search vendor "Cisco" for product "Secure Firewall 3130" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.1.0.0 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.1.0.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3140 Search vendor "Cisco" for product "Secure Firewall 3140" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.2.0.0 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.2.0.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3105 Search vendor "Cisco" for product "Secure Firewall 3105" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.2.0.0 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.2.0.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3110 Search vendor "Cisco" for product "Secure Firewall 3110" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.2.0.0 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.2.0.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3120 Search vendor "Cisco" for product "Secure Firewall 3120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.2.0.0 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.2.0.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3130 Search vendor "Cisco" for product "Secure Firewall 3130" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.2.0.0 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.2.0.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3140 Search vendor "Cisco" for product "Secure Firewall 3140" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.2.0.1 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.2.0.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3105 Search vendor "Cisco" for product "Secure Firewall 3105" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.2.0.1 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.2.0.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3110 Search vendor "Cisco" for product "Secure Firewall 3110" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.2.0.1 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.2.0.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3120 Search vendor "Cisco" for product "Secure Firewall 3120" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.2.0.1 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.2.0.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3130 Search vendor "Cisco" for product "Secure Firewall 3130" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | 7.2.0.1 Search vendor "Cisco" for product "Firepower Threat Defense" and version "7.2.0.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Secure Firewall 3140 Search vendor "Cisco" for product "Secure Firewall 3140" | - | - |
Safe
|