March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Alert – Rockwell Automation Arena Simulation Software
August 2, 2019
Rewterz Threat Alert – SectorE02 Updates YTY Framework in New Targeted Campaign Against Pakistan Government
August 4, 2019
Rewterz Threat Alert – Rockwell Automation Arena Simulation Software
August 2, 2019
Rewterz Threat Alert – SectorE02 Updates YTY Framework in New Targeted Campaign Against Pakistan Government
August 4, 2019
Severity
Medium
Analysis Summary
The vulnerability is due to insufficient validation of the firmware image file. An attacker could exploit this vulnerability by executing the BIOS upgrade utility with a specific set of options. A successful exploit could allow the attacker to bypass the firmware signature-verification process and install compromised BIOS firmware on an affected device.
Impact
Security bypass
Affected Vendors
Cisco
Affected Products
Cisco Unified Computing System (UCS) C-Series
Remediation
Please see vendor’s advisory for more details.