CVE-2015-0739

EPSS 0.28%
Published 19.05.2015 02:00:18
Last modified 12.04.2025 10:46:40
Source psirt@cisco.com
Teams watchlist Login
Open Login

The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.

Affected products Warnungen 0 Metrics 2 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Firesight System Software Version5.3.0

   Cisco ≫ Sourcefire 3d1000 Sensor Version-
   Cisco ≫ Sourcefire 3d2000 Sensor Version-
   Cisco ≫ Sourcefire 3d2100 Sensor Version-
   Cisco ≫ Sourcefire 3d2500 Sensor Version-
   Cisco ≫ Sourcefire 3d3500 Sensor Version-
   Cisco ≫ Sourcefire 3d4500 Sensor Version-
   Cisco ≫ Sourcefire 3d500 Sensor Version-
   Cisco ≫ Sourcefire 3d6500 Sensor Version-
   Cisco ≫ Sourcefire 3d9900 Sensor Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.28%	0.513

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:N/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://tools.cisco.com/security/center/viewAlert.x?alertId=38905

Vendor Advisory

http://www.securityfocus.com/bid/74709

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1032359

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2015-0739

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-0739

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-0739

EUVD