CVE-2019-1649

CVE-2019-1649 is a medium-severity vulnerability affecting Cisco products with hardware-based Secure Boot, allowing an authenticated, local attacker to write a modified firmware image to a hardware component due to improper access control logic. Exploitation requires elevated privileges, access to the underlying operating system, and a platform-specific exploit. A successful attack could render the device unusable or compromise the Secure Boot process, potentially allowing malicious software to boot. There is no public exploit code available, it is not actively exploited, and community discussion and media coverage are minimal.