{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T06:47:53Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20190513-secureboot","slug":"cisco-sa-20190513-secureboot","vendor":"Cisco","title":"Cisco Secure Boot Hardware Tampering Vulnerability","summary":"A vulnerability in the logic that handles access control to one of the hardware components in Cisco's proprietary Secure Boot implementation could allow an authenticated, local attacker to write a modified firmware image to the component. This vulnerability affects multiple Cisco products that support hardware-based Secure Boot functionality. The vulnerability is due to an improper check on the area of code that manages on-premise updates to a Field Programmable Gate Array (FPGA) part of the Secure Boot hardware implementation. An attacker with elevated privileges and access to the underlying operating system that is running on the affected device could exploit this vulnerability by writing a modified firmware image to the FPGA. A successful exploit could either cause the device to become unusable (and require a hardware replacement) or allow tampering with the Secure Boot verification process, which under some circumstances may allow the attacker to install and boot a malicious software image. Cisco will release software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","severity":"High","published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot/csaf/cisco-sa-20190513-secureboot.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":26,"public_evidence_count":26,"kev_count":0,"highest_epss":0.00611},"cves":[{"id":"CVE-2019-1649","kev":false,"epss":{"score":0.00611,"percentile":0.45361,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"}}],"public_evidence":[{"product":{"name":"Cisco 5000 Series Enterprise Network Compute System","slug":"cisco-5000-series-enterprise-network-compute-system","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco 5000 Series Enterprise Network Compute System","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":1},{"product":{"name":"Cisco ASA with FirePOWER Services","slug":"cisco-asa-with-firepower-services","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ASA with FirePOWER Services","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":2},{"product":{"name":"Cisco ASR 1000 Series Aggregation Services Routers","slug":"cisco-asr-1000-series-aggregation-services-routers","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ASR 1000 Series Aggregation Services Routers","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":3},{"product":{"name":"Cisco ASR 900 Series Aggregation Services Routers","slug":"cisco-asr-900-series-aggregation-services-routers","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ASR 900 Series Aggregation Services Routers","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":4},{"product":{"name":"Cisco ASR 9000 Series Aggregation Services Routers","slug":"cisco-asr-9000-series-aggregation-services-routers","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ASR 9000 Series Aggregation Services Routers","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":5},{"product":{"name":"Cisco Catalyst 6800 Series Switches","slug":"cisco-catalyst-6800-series-switches","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Catalyst 6800 Series Switches","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":6},{"product":{"name":"Cisco Network Convergence System 5500 Series","slug":"cisco-network-convergence-system-5500-series","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Network Convergence System 5500 Series","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":7},{"product":{"name":"Cisco Nexus 3000 Series Switch","slug":"cisco-nexus-3000-series-switch","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Nexus 3000 Series Switch","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":8},{"product":{"name":"Cisco NX-OS System Software in ACI Mode","slug":"cisco-nx-os-system-software-in-aci-mode","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco NX-OS System Software in ACI Mode","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":9},{"product":{"name":"Cisco Catalyst 9500 Series Switches","slug":"cisco-catalyst-9500-series-switches","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Catalyst 9500 Series Switches","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":10},{"product":{"name":"Cisco cBR-8 Converged Broadband Routers","slug":"cisco-cbr-8-converged-broadband-routers","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco cBR-8 Converged Broadband Routers","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":11},{"product":{"name":"Cisco Network Convergence System 1000 Series","slug":"cisco-network-convergence-system-1000-series","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Network Convergence System 1000 Series","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":12},{"product":{"name":"Cisco Firepower 2100 Series","slug":"cisco-firepower-2100-series","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Firepower 2100 Series","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":13},{"product":{"name":"Cisco 4000 Series Integrated Services Routers","slug":"cisco-4000-series-integrated-services-routers","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco 4000 Series Integrated Services Routers","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":14},{"product":{"name":"Cisco 3000 Series Industrial Security Appliances (ISA)","slug":"cisco-3000-series-industrial-security-appliances-isa","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco 3000 Series Industrial Security Appliances (ISA)","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":15},{"product":{"name":"Cisco 1000 Series Connected Grid Routers","slug":"cisco-1000-series-connected-grid-routers","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco 1000 Series Connected Grid Routers","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":16},{"product":{"name":"Cisco 800 Series Industrial Integrated Services Routers","slug":"cisco-800-series-industrial-integrated-services-routers","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco 800 Series Industrial Integrated Services Routers","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":17},{"product":{"name":"Cisco Nexus 7000 Series Switches","slug":"cisco-nexus-7000-series-switches","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Nexus 7000 Series Switches","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":18},{"product":{"name":"Cisco MDS 9700 Series Multilayer Directors","slug":"cisco-mds-9700-series-multilayer-directors","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco MDS 9700 Series Multilayer Directors","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":19},{"product":{"name":"Cisco Firepower 4100 Series","slug":"cisco-firepower-4100-series","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Firepower 4100 Series","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":20},{"product":{"name":"Cisco Firepower 9000 Series","slug":"cisco-firepower-9000-series","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Firepower 9000 Series","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":21},{"product":{"name":"Cisco IC3000 Industrial Compute Gateway","slug":"cisco-ic3000-industrial-compute-gateway","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco IC3000 Industrial Compute Gateway","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":22},{"product":{"name":"Cisco ASR 920 Series Aggregation Services Router","slug":"cisco-asr-920-series-aggregation-services-router","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ASR 920 Series Aggregation Services Router","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":23},{"product":{"name":"Cisco Nexus 9000 Series Switches","slug":"cisco-nexus-9000-series-switches","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Nexus 9000 Series Switches","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":24},{"product":{"name":"Cisco ONS 15454 Series Multiservice Transport Platforms","slug":"cisco-ons-15454-series-multiservice-transport-platforms","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco ONS 15454 Series Multiservice Transport Platforms","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":25},{"product":{"name":"Cisco Network Convergence System 2000 Series","slug":"cisco-network-convergence-system-2000-series","vendor":"Cisco"},"cve":{"id":"CVE-2019-1649"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-19T22:15:17Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Network Convergence System 2000 Series","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00611,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2019-05-13T17:30:00Z","updated_at":"2019-11-20T17:23:18Z","advisory_updated_at":"2019-11-20T17:23:18Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190513-secureboot"},"row_display_order":26}]}