CVE-2015-6370: OS Command Injection

Published Nov 19, 2015

Updated

The Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows local users to execute arbitrary OS commands as root via crafted CLI input, aka Bug ID CSCux10578.

Affected Software

1 affected component

Cisco Firepower Extensible Operating System=1.1\(1.160\)

Event History

Nov 19, 2015

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6370?

CVE-2015-6370 has a critical severity rating due to the potential for local users to execute arbitrary commands as root.

How do I fix CVE-2015-6370?

To fix CVE-2015-6370, upgrade your Cisco Firepower Extensible Operating System to a version that addresses this vulnerability.

Who is affected by CVE-2015-6370?

CVE-2015-6370 affects users of Cisco Firepower Extensible Operating System version 1.1(1.160) on Firepower 9000 devices.

What are the consequences of CVE-2015-6370?

The consequences of CVE-2015-6370 include potential unauthorized access and control over the operating system by local users.

When was CVE-2015-6370 disclosed?

CVE-2015-6370 was disclosed on November 16, 2015.