Improper Verification of Cryptographic Signature in Cisco Systems, Inc products - CVE-2021-1453
Published: March 30, 2021
Vulnerability identifier: #VU51778
CSH Severity: Low
CVSS v4: 7 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-1453
CWE-ID: CWE-347
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local attacker to compromise the target system.
The vulnerability exists due to an improper check in the code function that manages the verification of the digital signatures of system image files during the initial boot process. An attacker with physical access can boot a malicious software image or execute unsigned code and bypass the image verification check part of the secure boot process of an affected device.
Affected software
Catalyst C9500-32C Switch
Catalyst C9500-32QC Switch
Catalyst C9500-24Y4C Switch
Catalyst C9500-48Y4C Switch
Cisco Catalyst 9400 Series Switches
Cisco Catalyst 9600 Series Switches
Cisco IOS XE
How to mitigate CVE-2021-1453
Install updates from vendor's website.
Cisco IOS XE - addressed in versions 16.6.8.19, 16.6.9, 16.9.6.117, 16.9.7, 16.12.4.68, 16.12.5, 16.12.5a, 17.1.3, 17.3.2.8, 17.3.3, 17.4.0.212, 17.4.1b, 17.4.1.33, 17.5.0.110