CVE-2022-20826

MEDIUM

6.8

CVSS Score

Published: November 10, 2022 at 05:31 PM UTC

Updated: August 11, 2026 at 07:33 PM UTC

8 products affected across 1 vendorAdaptive Security ApplianceSecure Firewall Threat DefenseSecure Firewall 3140

Using Cisco Adaptive Security Appliance (ASA) Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Adaptive Security Appliance (ASA) Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.8

Exploit prediction

EPSS 0.3%

Description

A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated attacker with physical access to the device to bypass the secure boot functionality. This vulnerability is due to a logic error in the boot process. An attacker could exploit this vulnerability by injecting malicious code into a specific memory location during the boot process of an affected device. A successful exploit could allow the attacker to execute persistent code at boot time and break the chain of trust.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Adaptive Security Appliance · Cisco

95%

9.17.1 9.17.1.10 9.17.1.13 9.17.1.9 9.18.1 9.18.1.3

cisco-secure-firewall-3105 (environment) · cisco-secure-firewall-3110 (environment) · cisco-secure-firewall-3120 (environment) · cisco-secure-firewall-3130 (environment) · cisco-secure-firewall-3140 (environment)

Secure Firewall Threat Defense · Cisco

95%

7.1.0.0 7.2.0.0 7.2.0.1

Firepower Threat Defense · Cisco

60%

7.1.0 7.2.0

Secure Firewall 3105 · Ciscodevice

80%

All versions

Secure Firewall 3110 · Ciscodevice

80%

All versions