CVE-2015-0739: Input Validation
First published: Tue May 19 2015(Updated: )
The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco FireSIGHT System Software | =5.3.0 | |
| Cisco Sourcefire 3d1000 Sensor | ||
| Cisco Sourcefire 3d2000 Sensor | ||
| Cisco Sourcefire 3d2100 Sensor | ||
| Cisco Sourcefire 3d2500 Sensor | ||
| Cisco Sourcefire 3d3500 Sensor | ||
| Cisco Sourcefire 3d4500 Sensor | ||
| Cisco Sourcefire 3d500 Sensor | ||
| Cisco Sourcefire 3d6500 Sensor | ||
| Cisco Sourcefire 3d9900 Sensor |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/nvd-index
- vendor/cisco
- canonical/cisco firesight system software
- version/cisco firesight system software/5.3.0
- canonical/cisco sourcefire 3d1000 sensor
- canonical/cisco sourcefire 3d2000 sensor
- canonical/cisco sourcefire 3d2100 sensor
- canonical/cisco sourcefire 3d2500 sensor
- canonical/cisco sourcefire 3d3500 sensor
- canonical/cisco sourcefire 3d4500 sensor
- canonical/cisco sourcefire 3d500 sensor
- canonical/cisco sourcefire 3d6500 sensor
- canonical/cisco sourcefire 3d9900 sensor