CVE-2015-0739: Input Validation
First published: Tue May 19 2015(Updated: )
The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firesight System | =5.3.0 | |
| Sourcefire Intrusion Sensor | ||
| Sourcefire Intrusion Sensor | ||
| Sourcefire Intrusion Sensor | ||
| Sourcefire Intrusion Sensor | ||
| Sourcefire Intrusion Sensor | ||
| Sourcefire Intrusion Sensor | ||
| Sourcefire Intrusion Sensor | ||
| Sourcefire Intrusion Sensor | ||
| Sourcefire Intrusion Sensor |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2015-0739?
CVE-2015-0739 has a medium severity rating as it allows remote authenticated users to upload arbitrary files.
How do I fix CVE-2015-0739?
To address CVE-2015-0739, it is recommended to upgrade to a fixed version of Cisco FireSIGHT System Software.
Who is affected by CVE-2015-0739?
CVE-2015-0739 affects remote authenticated users of Cisco FireSIGHT System Software 5.3.0.
What does CVE-2015-0739 allow an attacker to do?
CVE-2015-0739 allows an attacker to perform arbitrary Baseboard Management Controller file uploads.
Is CVE-2015-0739 present in other Cisco Sourcefire sensor models?
No, CVE-2015-0739 is specific to Cisco FireSIGHT System Software 5.3.0 and does not affect other Sourcefire sensor models.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/references
- agent/description
- agent/weakness
- agent/severity
- agent/author
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco firesight system
- version/cisco firesight system/5.3.0
- canonical/sourcefire intrusion sensor