CVE-2015-0739

EPSS 0.28%
Veröffentlicht 19.05.2015 02:00:18
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@cisco.com
Teams Watchlist Login
Unerledigt Login

The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Firesight System Software Version5.3.0

   Cisco ≫ Sourcefire 3d1000 Sensor Version-
   Cisco ≫ Sourcefire 3d2000 Sensor Version-
   Cisco ≫ Sourcefire 3d2100 Sensor Version-
   Cisco ≫ Sourcefire 3d2500 Sensor Version-
   Cisco ≫ Sourcefire 3d3500 Sensor Version-
   Cisco ≫ Sourcefire 3d4500 Sensor Version-
   Cisco ≫ Sourcefire 3d500 Sensor Version-
   Cisco ≫ Sourcefire 3d6500 Sensor Version-
   Cisco ≫ Sourcefire 3d9900 Sensor Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.28%	0.513

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:N/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://tools.cisco.com/security/center/viewAlert.x?alertId=38905

Vendor Advisory

http://www.securityfocus.com/bid/74709

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1032359

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2015-0739

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-0739

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-0739

EUVD