CVE-2022-20826
Published: 15 November 2022
Summary
CVE-2022-20826 is a medium-severity Trust Boundary Violation (CWE-501) vulnerability in Cisco Adaptive Security Appliance Software. Its CVSS base score is 6.4 (Medium).
Operationally, ranked in the top 38.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-26076
Vulnerability details
A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated attacker with physical access to the device…
more
to bypass the secure boot functionality. This vulnerability is due to a logic error in the boot process. An attacker could exploit this vulnerability by injecting malicious code into a specific memory location during the boot process of an affected device. A successful exploit could allow the attacker to execute persistent code at boot time and break the chain of trust.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Establishes and maintains trust boundaries with external organizations before allowing their systems to interact with organization resources.
Prevents information from crossing trust boundaries without explicit approved authorizations.
Defining interfaces, controls, and trust responsibilities in agreements helps prevent violations of trust boundaries during data exchanges.
Authorizing and reviewing connections helps maintain proper trust boundaries between internal components.
Controlling media movement outside controlled areas maintains separation between internal and external trust boundaries.
Review of inter-system matching programs identifies and corrects trust-boundary violations before data crosses organizational or policy domains.
Defines explicit trust boundaries for PII use via documented purposes and prevents processing outside those boundaries.
Explicitly binding attributes to information crossing trust boundaries prevents loss of security context that leads to trust-boundary violations.