CyberSec.Space Logo
Back to CVE Browser

CVE-2015-6370

HIGH
7.2
CVSS Severity Score
EPSS Score0.0020%
EPSS Percentile38.73th
PublishedNov 19, 2015
Last ModifiedMay 6, 2026

Vulnerability Description

The Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows local users to execute arbitrary OS commands as root via crafted CLI input, aka Bug ID CSCux10578.

Affected Platforms (CPE)

💻
Cisco

Firepower Extensible Operating System

= 1.1\(1.160\)

References & Advisories

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151116-fire1
🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151116-fire1

Related Vulnerabilities

CVE-2017-38838.6

A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating ...

CVE-2015-63736.8

Cross-site request forgery (CSRF) vulnerability in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 device...

CVE-2015-63806.5

An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices all...

CVE-2017-123296.3

A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenti...