Is CVE-2019-1649 being actively exploited?

CVE-2019-1649 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2019-1649?

CVE-2019-1649 has a CVSS 3.1 base score of 6.7 (MEDIUM).

CVE-2019-1649

MEDIUM · CVSS 6.7EPSS 0.6%EU EUVD

A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability affects multiple Cisco products that support hardware-based Secure Boot functionality. The vulnerability is due to an improper check on the area of code that manages on-premise updates to a Field Programmable Gate Array (FPGA) part of the Secure Boot hardware implementation. An attacker with elevated privileges and access to the underlying operating system that is running on the affected device could exploit this vulnerability by writing a modified firmware image to the FPGA. A successful exploit could either cause the device to become unusable (and require a hardware replacement) or allow tampering with the Secure Boot verification process, which under some circumstances may allow the attacker to install and boot a malicious software image. An attacker will need to fulfill all the following conditions to attempt to exploit this vulnerability: Have privileged administrative access to the device. Be able to access the underlying operating system running on the device; this can be achieved either by using a supported, documented mechanism or by exploiting another vulnerability that would provide an attacker with such access. Develop or have access to a platform-specific exploit. An attacker attempting to exploit this vulnerability across multiple affected platforms would need to research each one of those platforms and then develop a platform-specific exploit. Although the research process could be reused across different platforms, an exploit developed for a given hardware platform is unlikely to work on a different hardware platform.

Key facts

CVSS score: 6.7 (v3.1)
Severity: MEDIUM
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-284
EPSS score: 0.6% (48th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2019-10206)
Published: May 13, 2019
NVD last modified: June 17, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2019-10206 in the EU Vulnerability Database. Last updated in EUVD on November 20, 2024.

View on the EU Vulnerability Database

Affected products

cisco / 1120 connected grid router
cisco / 1240 connected grid router
cisco / 15454-m-wse-k9
cisco / 15454-m-wse-k9 firmware
cisco / 4221 integrated services router
cisco / 4321 integrated services router
cisco / 4331 integrated services router
cisco / 4351 integrated services router
cisco / 4431 integrated services router
cisco / 44461 integrated services router
cisco / 4451-x integrated services router
cisco / 809 industrial integrated services routers
cisco / 829 industrial integrated services routers
cisco / a900-rsp2a-128
cisco / a900-rsp2a-64
cisco / a900-rsp3c-200
cisco / a900-rsp3c-400/w
cisco / a99-16x100ge-x-se
cisco / a99-32x100ge-cm
cisco / a99-32x100ge-tr
cisco / a99-rp3-se
cisco / a99-rp3-tr
cisco / a9k-16x100ge-cm
cisco / a9k-16x100ge-tr
cisco / a9k-rsp5-se
cisco / a9k-rsp5-tr
cisco / analog voice network interface modules firmware
cisco / asa 5500 firmware
cisco / asa 5506-x
cisco / asa 5506h-x
cisco / asa 5506w-x
cisco / asa 5508-x
cisco / asa 5516-x
cisco / asr 1000 series
cisco / asr 1000 series firmware
cisco / asr 1000-esp100
cisco / asr 1001 firmware
cisco / asr 1001-hx
cisco / asr 1001-x
cisco / asr 1002-hx
cisco / asr-920-10sz-pd
cisco / asr-920-12cz-a
cisco / asr-920-12cz-d
cisco / asr-920-12sz-a
cisco / asr-920-12sz-d
cisco / asr-920-12sz-im-cc
cisco / asr-920-24sz-m
cisco / asr-920-24tz-im
cisco / asr-920-24tz-m
cisco / asr-920-4sz-a

and 144 more…

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

Cisco Aggregation Services Router (ASR) 1000 Series - Cisco Systems, Inc. - Common Criteria CCEVS-VR-VID-10518-2013 - archived

References

http://www.securityfocus.com/bid/108350(Third Party Advisory, VDB Entry)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot(Vendor Advisory)
https://www.kb.cert.org/vuls/id/400865(Third Party Advisory, US Government Resource)
https://www.us-cert.gov/ics/advisories/icsa-20-072-03(Third Party Advisory, US Government Resource)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain