Improper input validation in Cisco Firesight System Software
CVE-2015-0739
The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.020 (78.8th percentile) — read the EPSS interpretation.
Affected products
- Cisco Firesight_system_software — versions 5.3.0
- Cisco Sourcefire_3d1000_sensor
- Cisco Sourcefire_3d2000_sensor
- Cisco Sourcefire_3d2100_sensor
- Cisco Sourcefire_3d2500_sensor
- Cisco Sourcefire_3d3500_sensor
- Cisco Sourcefire_3d4500_sensor
- Cisco Sourcefire_3d500_sensor
- Cisco Sourcefire_3d6500_sensor
- Cisco Sourcefire_3d9900_sensor
Weakness classification (CWE)
References
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)