Cisco Secure Boot Hardware Tampering Vulnerability

[Ravi000032]

a

[Leo Laohoo]

Without knowing the version the ASA is running, I'd say "yes".

[csgoodri]

Looking at our ASA's, we are running the following: Fw Version 2.1(9)8.  The advisory says that we need to be running 1.1.15.  So would we need to apply that new version?

[Marvin Rhoads]

Not all ASAs use secure boot. Only the ASA 5506-X (including H and W variants), 5508-X, 5516-X models (sometimes known as "Kenton" models) use that technology. Their ASA software images have "lfbff" in the image name to denote a digitally signed image that is required for secure boot.

The industrial-hardened ISA 3000 also uses secure boot.

All other ASA models do not use secure boot.