CyberSec.Space Logo
Back to CVE Browser

CVE-2015-6380

MEDIUM
6.5
CVSS Severity Score
EPSS Score0.1160%
EPSS Percentile14.63th
PublishedNov 24, 2015
Last ModifiedMay 6, 2026

Vulnerability Description

An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to execute arbitrary OS commands via crafted parameters, aka Bug ID CSCux10622.

Affected Platforms (CPE)

💻
Cisco

Firepower Extensible Operating System

= 1.1\(1.160\)

References & Advisories

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151123-fire
🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151123-fire

Related Vulnerabilities

CVE-2017-38838.6

A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating ...

CVE-2015-63707.2

The Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows loca...

CVE-2015-63736.8

Cross-site request forgery (CSRF) vulnerability in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 device...

CVE-2017-123296.3

A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenti...