THREATOPS
THREAT OPS › Threat News › Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability

medcisco_psirtPublished 2026-09-08

<p>A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an <span class="mce-annotation tox-comment">authenticated attacker with valid credentials for a user account with the role of <em>user</em> or <span class="mce-annotation tox-comment"><em>admin</em></span></span>&nbsp;or an unauthenticated attacker w

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-uefi-sb-bypass-eb6xC5GW?vs_f=Cisco%20Security%20Advisory%26vs_cat=Security%20Intelligence%26vs_type=RSS%26vs_p=Cisco%20UCS%20and%20UCS-Based%20Appliances%20UEFI%20Shell%20Secure%20Boot%20Bypass%20Vulnerability%26vs_k=1