CyberSec.Space Logo
CVEブラウザに戻る

CVE-2015-6373

MEDIUM
6.8
CVSS Severity Score
EPSS Score0.0010%
EPSS Percentile44.96th
Published2015年11月18日
Last Modified2026年5月6日

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCux10611.

Affected Platforms (CPE)

💻
Cisco

Firepower Extensible Operating System

= 1.1\(1.160\)

References & Advisories

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151117-firepower3
🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151117-firepower3

関連する脆弱性情報

CVE-2017-38838.6

A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating ...

CVE-2015-63707.2

The Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows loca...

CVE-2015-63806.5

An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices all...

CVE-2017-123296.3

A vulnerability in the CLI of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an authenti...