CVE:CVE-2019-1736
CNNVD:CNNVD-202002-992
Cisco UCS C-Series是美国思科（Cisco）公司的一款C系列机架式服务器。
Cisco UCS C-Series Rack Servers中的固件存在数据伪造漏洞，该漏洞源于程序无法正确验证服务器固件更新镜像。攻击者可利用该漏洞利用该漏洞绕过签名验证检查并加载未被Cisco签名的软件镜像。以下产品及版本受到影响：Firepower Management Center (FMC) 1000；Firepower Management Center (FMC) 2500；Firepower Management Center (FMC) 4500；Secure Network Server 3500 Series Appliances；Secure Network Server 3600 Series Appliances；Threat Grid 5504 Appliance。
solution:Upgrade cisco fmc1000-k9_bios to a higher version than 4.0.1f.0,and avoid the version (,4.0.1f.0); Upgrade cisco fmc1000-k9_firmware to a higher version than 4.0.2h,and avoid the version (,4.0.2h); Upgrade cisco fmc2500-k9_bios to a higher version than 4.0.1f.0,and avoid the version (,4.0.1f.0); Upgrade cisco fmc2500-k9_firmware to a higher version than 4.0.2h,and avoid the version (,4.0.2h); Upgrade cisco fmc4500-k9_bios to a higher version than 4.0.1f.0,and avoid the version (,4.0.1f.0); Upgrade cisco fmc4500-k9_firmware to a higher version than 4.0.2h,and avoid the version (,4.0.2h); Upgrade cisco sns-3515-k9_bios to a higher version than 4.0.2d,and avoid the version (,4.0.2d); Upgrade cisco sns-3515-k9_firmware to a higher version than 4.0.2h,and avoid the version (,4.0.2h); Upgrade cisco sns-3595-k9_bios to a higher version than 4.0.2d,and avoid the version (,4.0.2d); Upgrade cisco sns-3595-k9_firmware to a higher version than 4.0.2h,and avoid the version (,4.0.2h); Upgrade cisco sns-3615-k9_bios to a higher version than 4.0.1i,and avoid the version (,4.0.1i); Upgrade cisco sns-3615-k9_firmware to a higher version than 4.0.1g,and avoid the version (,4.0.1g); Upgrade cisco sns-3655-k9_bios to a higher version than 4.0.1i,and avoid the version (,4.0.1i); Upgrade cisco sns-3655-k9_firmware to a higher version than 4.0.1g,and avoid the version (,4.0.1g); Upgrade cisco sns-3695-k9_bios to a higher version than 4.0.1i,and avoid the version (,4.0.1i); Upgrade cisco sns-3695-k9_firmware to a higher version than 4.0.1g,and avoid the version (,4.0.1g); Upgrade cisco tg5004-k9_bios to a higher version than 4.0.2d,and avoid the version (,4.0.2d); Upgrade cisco tg5004-k9_firmware to a higher version than 4.0.2h,and avoid the version (,4.0.2h); Upgrade cisco tg5004-k9-rf_bios to a higher version than 4.0.2d,and avoid the version (,4.0.2d); Upgrade cisco tg5004-k9-rf_firmware to a higher version than 4.0.2h,and avoid the version (,4.0.2h); Upgrade cisco identity_services_engine to a higher version than 2.4(0.357,2.6(0.156,and avoid the version 2.4(0.357),2.6(0.156); Upgrade cisco unified_computing_system to a higher version than 3.2(3hc,and avoid the version 3.2(3h)c