CVE-2015-0739

Cisco FireSIGHT System Software 5.3.0 - Authenticated Arbitrary BMC File Upload via LOM

Title source: llm
STIX 2.1

Description

The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/74709
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=38905
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032359

Scores

EPSS 0.0201
EPSS Percentile 78.5%

Details

CWE
CWE-20
Status published
Products (1)
cisco/firesight_system_software 5.3.0
Published May 19, 2015
Tracked Since Feb 18, 2026