Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

CVE v události 1

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 7.1.

Jak se o tom psalo 3

1. 9. 9. 2026 · zachyceno 04:30 · NCSC-FI FI nadpis události

   Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

   Classification: Important, Solution: Official Fix, Exploit Maturity: Proof-of-Concept, CVSSv3.1: 7.1, CVEs: CVE-2026-20293, Summary: A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access to an affected device to bypass UEFI Secure Boot validation checks…

2. 9. 9. 2026 · zachyceno 16:00 · CERT-FR – avis FR

   Vulnérabilité dans les produits Cisco (09 septembre 2026)

   Une vulnérabilité a été découverte dans les produits Cisco. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.

3. 8. 9. 2026 18:00 · Cisco PSIRT US

   Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

   A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or admin or an unauthenticated attacker with physical access to an affected device to bypass UEFI Secure Boot validation checks and execute unauthorized software. This vulnerability is due to the availability of memory write commands in the UEFI Shell while UEFI…