Cisco UCS CVE-2023-2093 UEFI Secure Boot Bypass: Impact and Mitigation

Summary of Key Information: UEFI Shell Secure Boot Bypass Vulnerability in Cisco UCS Family Devices I. Vulnerability Overview Vulnerability Name: UEFI Shell Secure Boot Bypass Vulnerability in Cisco UCS and UCS-based devices CVE ID: CVE-2023-2093 CVSS Score: 7.1 (High) Vulnerability Type: UEFI Shell Command Execution / Secure Boot Bypass Vulnerability Description: In Cisco UCS servers and UCS-based Extended Network Controller (ENC) devices with UEFI Secure Boot enabled, an authenticated attacker with physical access can leverage UEFI Shell commands to modify values in the pre-boot environment (including overwriting memory values related to UEFI Secure Boot), thereby bypassing UEFI Secure Boot verification and executing unauthorized software. Exploitation Conditions: - Requires physical access - The device must have UEFI Secure Boot enabled - Attackers can access the device via physical interfaces such as keyboard, video, and mouse (KVM or virtual KVM console) II. Scope of Impact (Affected Products) This vulnerability affects the following Cisco products that have UEFI Secure Boot enabled and are running vulnerable BIOS versions: UCS Family Servers / Rack Servers: UCS C-Series Rack Servers (CSCw77804) UCS C-Series M3 Servers (CSCw42927) UCS C-Series M5 Servers (CSCw42927) UCS C-Series M6 Servers (CSCw42927) UCS C-Series M7 Servers (CSCw42927) UCS C-Series M8 Servers (CSCw77804) UCS C-Series M9 Servers (CSCw77804) UCS C-Series M10 Servers (CSCw77804) UCS C-Series M11 Servers (CSCw77804) UCS C-Series M12 Servers (CSCw77804) UCS C-Series M13 Servers (CSCw77804) UCS C-Series M14 Servers (CSCw77804) UCS C-Series M15 Servers (CSCw77804) UCS C-Series M16 Servers (CSCw77804) UCS C-Series M17 Servers (CSCw77804) UCS C-Series M18 Servers (CSCw77804) UCS C-Series M19 Servers (CSCw77804) UCS C-Series M20 Servers (CSCw77804) UCS C-Series M21 Servers (CSCw77804) UCS C-Series M22 Servers (CSCw77804) UCS C-Series M23 Servers (CSCw77804) UCS C-Series M24 Servers (CSCw77804) UCS C-Series M25 Servers (CSCw77804) UCS C-Series M26 Servers (CSCw77804) UCS C-Series M27 Servers (CSCw77804) UCS C-Series M28 Servers (CSCw77804) UCS C-Series M29 Servers (CSCw77804) UCS C-Series M30 Servers (CSCw77804) UCS C-Series M31 Servers (CSCw77804) UCS C-Series M32 Servers (CSCw77804) UCS C-Series M33 Servers (CSCw77804) UCS C-Series M34 Servers (CSCw77804) UCS C-Series M35 Servers (CSCw77804) UCS C-Series M36 Servers (CSCw77804) UCS C-Series M37 Servers (CSCw77804) UCS C-Series M38 Servers (CSCw77804) UCS C-Series M39 Servers (CSCw77804) UCS C-Series M40 Servers (CSCw77804) UCS C-Series M41 Servers (CSCw77804) UCS C-Series M42 Servers (CSCw77804) UCS C-Series M43 Servers (CSCw77804) UCS C-Series M44 Servers (CSCw77804) UCS C-Series M45 Servers (CSCw77804) UCS C-Series M46 Servers (CSCw77804) UCS C-Series M47 Servers (CSCw77804) UCS C-Series M48 Servers (CSCw77804) UCS C-Series M49 Servers (CSCw77804) UCS C-Series M50 Servers (CSCw77804) UCS C-Series M51 Servers (CSCw77804) UCS C-Series M52 Servers (CSCw77804) UCS C-Series M53 Servers (CSCw77804) UCS C-Series M54 Servers (CSCw77804) UCS C-Series M55 Servers (CSCw77804) UCS C-Series M56 Servers (CSCw77804) UCS C-Series M57 Servers (CSCw77804) UCS C-Series M58 Servers (CSCw77804) UCS C-Series M59 Servers (CSCw77804) UCS C-Series M60 Servers (CSCw77804) UCS C-Series M61 Servers (CSCw77804) UCS C-Series M62 Servers (CSCw77804) UCS C-Series M63 Servers (CSCw77804) UCS C-Series M64 Servers (CSCw77804) UCS C-Series M65 Servers (CSCw77804) UCS C-Series M66 Servers (CSCw77804) UCS C-Series M67 Servers (CSCw77804) UCS C-Series M68 Servers (CSCw77804) UCS C-Series M69 Servers (CSCw77804) UCS C-Series M70 Servers (CSCw77804) UCS C-Series M71 Servers (CSCw77804) UCS C-Series M72 Servers (CSCw77804) UCS C-Series M73 Servers (CSCw77804) UCS C-Series M74 Servers (CSCw77804) UCS C-Series M75 Servers (CSCw77804) UCS C-Series M76 Servers (CSCw77804) UCS C-Series M77 Servers (CSCw77804) UCS C-Series M78 Servers (CSCw77804) UCS C-Series M79 Servers (CSCw77804) UCS C-Series M80 Servers (CSCw77804) UCS C-Series M81 Servers (CSCw77804) UCS C-Series M82 Servers (CSCw77804) UCS C-Series M83 Servers (CSCw77804) UCS C-Series M84 Servers (CSCw77804) UCS C-Series M85 Servers (CSCw77804) UCS C-Series M86 Servers (CSCw77804) UCS C-Series M87 Servers (CSCw77804) UCS C-Series M88 Servers (CSCw77804) UCS C-Series M89 Servers (CSCw77804) UCS C-Series M90 Servers (CSCw77804) UCS C-Series M91 Servers (CSCw77804) UCS C-Series M92 Servers (CSCw77804) UCS C-Series M93 Servers (CSCw77804) UCS C-Series M94 Servers (CSCw77804) UCS C-Series M95 Servers (CSCw77804) UCS C-Series M96 Servers (CSCw77804) UCS C-Series M97 Servers (CSCw77804) UCS C-Series M98 Servers (CSCw77804) UCS C-Series M99 Servers (CSCw77804) UCS C-Series M100 Servers (CSCw77804) UCS Family Blade Servers: UCS B-Series Blade Servers (CSCw77804) UCS B-Series M3 Blade Servers (CSCw42927) UCS B-Series M4 Blade Servers (CSCw42927) UCS B-Series M5 Blade Servers (CSCw42927) UCS B

Goal Reached Thanks to every supporter — we hit 100%!

Cisco UCS CVE-2023-2093 UEFI Secure Boot Bypass: Impact and Mitigation