CVE-2015-6369: Input Validation

Published Nov 19, 2015

Updated

The USB driver in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows physically proximate attackers to cause a denial of service via a crafted USB device that triggers invalid USB commands, aka Bug ID CSCux10531.

Affected Software

1 affected component

Cisco Firepower Extensible Operating System=1.1\(1.160\)

Event History

Nov 19, 2015

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6369?

The severity of CVE-2015-6369 is classified as high due to its potential to cause a denial of service.

How do I fix CVE-2015-6369?

To mitigate CVE-2015-6369, it is recommended to apply the latest security updates from Cisco for Firepower Extensible Operating System.

What kind of attack does CVE-2015-6369 allow?

CVE-2015-6369 allows physically proximate attackers to trigger a denial of service through a crafted USB device.

Which devices are affected by CVE-2015-6369?

CVE-2015-6369 affects Cisco Firepower 9000 devices running Firepower Extensible Operating System version 1.1(1.160).

What is Bug ID CSCux10531 related to CVE-2015-6369?

Bug ID CSCux10531 relates to the specific issue within the Cisco USB driver that allows the denial of service vulnerability in CVE-2015-6369.