CVEvulnerability
CVE-2015-0739
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-05-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.
Affected configurations
• cisco firesight system software 5.3.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=38905 Vendor Advisory
- http://www.securityfocus.com/bid/74709 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032359 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=38905 Vendor Advisory
- http://www.securityfocus.com/bid/74709 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032359 Third Party Advisory, VDB Entry