CVE-2022-20826 (CNNVD-202211-2431)
中文标题:
Cisco Firepower Threat Defense 安全漏洞
英文标题:
A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are run...
漏洞描述
中文描述:
Cisco Firepower Threat Defense（FTD）和Cisco Adaptive Security Appliance都是美国思科（Cisco）公司的产品。Cisco Firepower Threat Defense是一套提供下一代防火墙服务的统一软件。Cisco Adaptive Security Appliance是一个网络设备。用于保护各种规模的公司网络和数据中心。 Cisco Adaptive Security Appliance(ASA) Software和Cisco Firepower Threat Defense(FTD) Software存在安全漏洞，该漏洞源于允许对设备有物理访问权的未认证攻击者绕过安全启动功能，攻击者可以通过在受影响设备的启动过程中向特定内存位置注入恶意代码来利用这一漏洞。如果成功利用，攻击者可以在启动时执行持久性代码并破坏信任链。
英文描述:
A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated attacker with physical access to the device to bypass the secure boot functionality. This vulnerability is due to a logic error in the boot process. An attacker could exploit this vulnerability by injecting malicious code into a specific memory location during the boot process of an affected device. A successful exploit could allow the attacker to execute persistent code at boot time and break the chain of trust.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | 9.17.1 | - | - |
cpe:2.3:a:cisco:cisco_adaptive_security_appliance_(asa)_software:9.17.1:*:*:*:*:*:*:*
|
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | 9.17.1.9 | - | - |
cpe:2.3:a:cisco:cisco_adaptive_security_appliance_(asa)_software:9.17.1.9:*:*:*:*:*:*:*
|
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | 9.17.1.10 | - | - |
cpe:2.3:a:cisco:cisco_adaptive_security_appliance_(asa)_software:9.17.1.10:*:*:*:*:*:*:*
|
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | 9.17.1.13 | - | - |
cpe:2.3:a:cisco:cisco_adaptive_security_appliance_(asa)_software:9.17.1.13:*:*:*:*:*:*:*
|
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | 9.18.1 | - | - |
cpe:2.3:a:cisco:cisco_adaptive_security_appliance_(asa)_software:9.18.1:*:*:*:*:*:*:*
|
| Cisco | Cisco Adaptive Security Appliance (ASA) Software | 9.18.1.3 | - | - |
cpe:2.3:a:cisco:cisco_adaptive_security_appliance_(asa)_software:9.18.1.3:*:*:*:*:*:*:*
|
| Cisco | Cisco Firepower Threat Defense Software | 7.1.0 | - | - |
cpe:2.3:a:cisco:cisco_firepower_threat_defense_software:7.1.0:*:*:*:*:*:*:*
|
| Cisco | Cisco Firepower Threat Defense Software | 7.2.0 | - | - |
cpe:2.3:a:cisco:cisco_firepower_threat_defense_software:7.2.0:*:*:*:*:*:*:*
|
| Cisco | Cisco Firepower Threat Defense Software | 7.2.0.1 | - | - |
cpe:2.3:a:cisco:cisco_firepower_threat_defense_software:7.2.0.1:*:*:*:*:*:*:*
|
| cisco | adaptive_security_appliance_software | 9.17.1 | - | - |
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1:*:*:*:*:*:*:*
|
| cisco | adaptive_security_appliance_software | 9.17.1.9 | - | - |
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.9:*:*:*:*:*:*:*
|
| cisco | adaptive_security_appliance_software | 9.17.1.10 | - | - |
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.10:*:*:*:*:*:*:*
|
| cisco | adaptive_security_appliance_software | 9.17.1.13 | - | - |
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.17.1.13:*:*:*:*:*:*:*
|
| cisco | adaptive_security_appliance_software | 9.18.1 | - | - |
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1:*:*:*:*:*:*:*
|
| cisco | adaptive_security_appliance_software | 9.18.1.3 | - | - |
cpe:2.3:o:cisco:adaptive_security_appliance_software:9.18.1.3:*:*:*:*:*:*:*
|
| cisco | firepower_threat_defense | 7.1.0.0 | - | - |
cpe:2.3:a:cisco:firepower_threat_defense:7.1.0.0:*:*:*:*:*:*:*
|
| cisco | firepower_threat_defense | 7.2.0.0 | - | - |
cpe:2.3:a:cisco:firepower_threat_defense:7.2.0.0:*:*:*:*:*:*:*
|
| cisco | firepower_threat_defense | 7.2.0.1 | - | - |
cpe:2.3:a:cisco:firepower_threat_defense:7.2.0.1:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
CVSS评分详情
3.1 (cna)
MEDIUMCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2022-20826 |
2025-11-11 15:21:15 | 2025-11-11 07:37:15 |
| NVD | nvd_CVE-2022-20826 |
2025-11-11 14:58:28 | 2025-11-11 07:45:32 |
| CNNVD | cnnvd_CNNVD-202211-2431 |
2025-11-11 15:11:03 | 2025-11-11 07:57:38 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202211-2431
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 9 -> 18
- data_sources: ['cve'] -> ['cve', 'nvd']