FKIE_CVE-2015-6435
Vulnerability from fkie_nvd - Published: 2016-01-22 11:59 - Updated: 2025-04-12 10:46
Severity ?
Summary
An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888.
References
| URL | Tags | ||
|---|---|---|---|
| psirt@cisco.com | http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html | Exploit, Third Party Advisory, VDB Entry | |
| psirt@cisco.com | http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm | Vendor Advisory | |
| psirt@cisco.com | http://www.securitytracker.com/id/1034743 | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html | Exploit, Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id/1034743 | Third Party Advisory, VDB Entry |
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:firepower_extensible_operating_system:1.1\\(1.86\\):*:*:*:*:*:*:*",
"matchCriteriaId": "0DCF5F07-33A1-48B3-B20A-FA6C13FDD469",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:firepower_extensible_operating_system:1.1\\(1.160\\):*:*:*:*:*:*:*",
"matchCriteriaId": "5B9E0CD4-B484-4323-AC1D-A0817F0F8C49",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:cisco:firepower_extensible_operating_system:1.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "E313D2E5-70D2-4553-8A2C-9D129C20C857",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.0\\(2k\\):*:*:*:*:*:*:*",
"matchCriteriaId": "99A5E1B0-4DC3-41E7-8560-56A94F06283B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.0_base:*:*:*:*:*:*:*",
"matchCriteriaId": "87D49A41-C6A8-46EB-8128-EAF42B91C113",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.1\\(1m\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B88073EC-8B4F-4B87-9BF3-AEF78676C51E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.1_base:*:*:*:*:*:*:*",
"matchCriteriaId": "6046C767-4302-4084-B615-058082219507",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.2\\(1d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "7D0E282D-5EF5-45E0-AE20-DB52AC2F62DC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.2_base:*:*:*:*:*:*:*",
"matchCriteriaId": "53DF6410-FE02-416A-9628-C43348F6C4A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "068F6305-38EB-4712-9EE3-BA77DEA87359",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1m\\):*:*:*:*:*:*:*",
"matchCriteriaId": "E6324445-E24C-41E5-A2ED-CD2433CF00B2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1n\\):*:*:*:*:*:*:*",
"matchCriteriaId": "2D018115-49B2-4481-BC89-BCD122A87856",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1o\\):*:*:*:*:*:*:*",
"matchCriteriaId": "AEE866E2-20AA-493B-A18B-2996F5AD1EDE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1p\\):*:*:*:*:*:*:*",
"matchCriteriaId": "485E1E2D-C985-4B8A-90CC-A792CCB54A19",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1q\\):*:*:*:*:*:*:*",
"matchCriteriaId": "DC05BF73-91F4-4609-A995-743887D0288A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1t\\):*:*:*:*:*:*:*",
"matchCriteriaId": "779EEBFE-4C19-4A98-9003-E8639C6000E7",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1w\\):*:*:*:*:*:*:*",
"matchCriteriaId": "5609CA23-04A1-4308-B0BA-AC7CAF10168A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1y\\):*:*:*:*:*:*:*",
"matchCriteriaId": "CADCBFF3-4EF3-4044-A6BD-87F1EFA3F400",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3_base:*:*:*:*:*:*:*",
"matchCriteriaId": "B35C1FFF-C436-4AE8-B600-54E1715479C4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(1i\\):*:*:*:*:*:*:*",
"matchCriteriaId": "4572E676-A059-47B1-B551-575BDDE88DF6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(1j\\):*:*:*:*:*:*:*",
"matchCriteriaId": "C2DA99C7-B65E-41E8-96BF-97AC4754FA11",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(1m\\):*:*:*:*:*:*:*",
"matchCriteriaId": "CF0376E5-6ED5-4FBE-BBC9-49EE34F33FFB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3i\\):*:*:*:*:*:*:*",
"matchCriteriaId": "E2B3DCC9-D55E-43AB-B3A4-74E875D90CF5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3l\\):*:*:*:*:*:*:*",
"matchCriteriaId": "BFFD5DDE-F102-4BCE-B6FF-F933D9A6DBE1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3m\\):*:*:*:*:*:*:*",
"matchCriteriaId": "BFC57665-4DB5-466C-9BC2-E3071C44EDF8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3q\\):*:*:*:*:*:*:*",
"matchCriteriaId": "2CA75F8F-2028-4A1D-86BC-4E28A7BEF482",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3s\\):*:*:*:*:*:*:*",
"matchCriteriaId": "8A5476F9-F175-4DF2-8008-816DCA4C37C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3u\\):*:*:*:*:*:*:*",
"matchCriteriaId": "A6C892C7-97A2-4E33-AE5C-7221EEA30924",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3y\\):*:*:*:*:*:*:*",
"matchCriteriaId": "5419EF64-2884-4A02-8F1D-3E14AC5BD656",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4f\\):*:*:*:*:*:*:*",
"matchCriteriaId": "FF2382B3-898B-4667-9861-93237260F6AF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4g\\):*:*:*:*:*:*:*",
"matchCriteriaId": "610386C6-920B-48F8-BD9D-F03FE6B841A3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4i\\):*:*:*:*:*:*:*",
"matchCriteriaId": "A2A4CF61-CE7A-4056-8767-15A513CD7625",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4j\\):*:*:*:*:*:*:*",
"matchCriteriaId": "8B392281-1F3F-40F8-8DFE-79BCCBABE51A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4k\\):*:*:*:*:*:*:*",
"matchCriteriaId": "9033AFEC-350E-43FA-852B-13E4B093C7A1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4_base:*:*:*:*:*:*:*",
"matchCriteriaId": "59AD6159-8E1B-49B7-A674-ABCBE735AEC3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(1m\\):*:*:*:*:*:*:*",
"matchCriteriaId": "92A3688C-07A7-4512-961B-760F6409A870",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(1q\\):*:*:*:*:*:*:*",
"matchCriteriaId": "022E46EF-EF65-4D1F-B4B1-47A4132D251A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(1s\\):*:*:*:*:*:*:*",
"matchCriteriaId": "6033C22A-F8B4-4B23-907F-FDA63096DA50",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(1t\\):*:*:*:*:*:*:*",
"matchCriteriaId": "63FBD6C9-9460-4859-8894-BA9C26852152",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(1w\\):*:*:*:*:*:*:*",
"matchCriteriaId": "AEF91510-F611-4EFF-AFED-A028493263CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(1x\\):*:*:*:*:*:*:*",
"matchCriteriaId": "58EFD9D0-BF36-45CC-962D-88135BD7C919",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(2m\\):*:*:*:*:*:*:*",
"matchCriteriaId": "66EBA481-49EE-4D57-A3C3-DB654B2951D3",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(2q\\):*:*:*:*:*:*:*",
"matchCriteriaId": "A9F95BDE-C353-418B-8BCF-F7BA8EE740D2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(2r\\):*:*:*:*:*:*:*",
"matchCriteriaId": "44E4BCAD-D952-4BF8-A988-F2DA2510DC8B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(3a\\):*:*:*:*:*:*:*",
"matchCriteriaId": "58E7E5FD-EDFA-457A-85B3-BDE687AB47BE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(3b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "F8BFE5B7-023F-4368-94E4-87B377C06855",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(3c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "A6658A81-E9D8-42CE-B89F-4B8B19B90EAC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(4a\\):*:*:*:*:*:*:*",
"matchCriteriaId": "580A7A52-7A57-428A-8A4E-6C2DF4143170",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(4b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "46C89082-9755-47B5-B0C2-E77447EF1B59",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(4d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "ECD8BC5E-ED77-4526-87C7-C259C42A9889",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(5a\\):*:*:*:*:*:*:*",
"matchCriteriaId": "3F78693A-AA54-44FD-AB16-E28C71B1E4EB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(5b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "050A0BD8-AAEA-40D3-9834-88AC7B34F3E0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(5c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "95C9B496-F0D0-45C3-8D38-102DB174F0AD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0_base:*:*:*:*:*:*:*",
"matchCriteriaId": "09C58C35-F8CD-4432-B33C-2AAFEFF3C0EC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1\\(1a\\):*:*:*:*:*:*:*",
"matchCriteriaId": "3697BA4C-EA25-4C91-8319-51AE7E3354BE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1\\(1b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "8688217A-883D-46BE-8D9B-DBD22334252F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1\\(1d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "95214EC8-C90F-484D-AA1E-559CFAD20307",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1\\(1e\\):*:*:*:*:*:*:*",
"matchCriteriaId": "3160E911-2FA8-48D7-A467-FB1125092745",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1\\(1f\\):*:*:*:*:*:*:*",
"matchCriteriaId": "57C64E54-BB97-4336-B988-C9C099C23FB4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1\\(2a\\):*:*:*:*:*:*:*",
"matchCriteriaId": "E3E1E439-295B-4F12-BDC4-0E12E60C5911",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1_base:*:*:*:*:*:*:*",
"matchCriteriaId": "068EF1CF-6BC8-45FA-A2CF-26E639EC8967",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "859B1CD5-2005-4D86-B794-18E311AEDDA6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "30F9E8E6-9F7D-4D3A-A952-B962219DC6C9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "B9D2CFFD-3050-4004-92F5-95E93DBB5560",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1e\\):*:*:*:*:*:*:*",
"matchCriteriaId": "3CB02F09-0323-47B4-87A7-4BFC64915093",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1f\\):*:*:*:*:*:*:*",
"matchCriteriaId": "853237D8-847B-48D9-8EB1-763530B98833",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1g\\):*:*:*:*:*:*:*",
"matchCriteriaId": "62EB3042-14CE-43ED-A28E-FCE8A3CE0AD2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1h\\):*:*:*:*:*:*:*",
"matchCriteriaId": "A57A4706-1AC1-4D21-A187-B59AD3FA4F30",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(2c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "17BC5C43-2B2F-479A-8BEF-69EC8465203B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(2c\\)a:*:*:*:*:*:*:*",
"matchCriteriaId": "234C0F15-9E53-4C27-A0C3-DB124AC0959E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3a\\):*:*:*:*:*:*:*",
"matchCriteriaId": "430C45DB-B59A-40BD-A877-015155C2CEF1",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "9068CA60-F05F-4C32-9828-5E13C981C39C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "29835968-61B4-4508-B904-C277243E588A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "62AA4DDA-B12B-469B-BD8F-F3B6AE972476",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3e\\):*:*:*:*:*:*:*",
"matchCriteriaId": "BD80F588-9699-42CC-8AB6-0D8A16353EBB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3f\\):*:*:*:*:*:*:*",
"matchCriteriaId": "BCCEB4B3-D5CC-485F-972F-75B22759A878",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3g\\):*:*:*:*:*:*:*",
"matchCriteriaId": "657080ED-79A8-41B1-88C6-C66400D413B5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(4b\\):*:*:*:*:*:*:*",
"matchCriteriaId": "8D3A6638-C070-41B9-B098-9217122F4689",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(4c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "3005E846-EAE3-4B91-8AC2-96CF2D53CDC0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(5a\\):*:*:*:*:*:*:*",
"matchCriteriaId": "1E32A101-DCE5-4057-B89A-DA2910FE3E06",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2_base:*:*:*:*:*:*:*",
"matchCriteriaId": "280856B2-45F4-413B-AA46-1B1741626584",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.0\\(1c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "F96C8D0C-B97C-4F92-A15E-52E312CB7837",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.0\\(1d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "AA860437-AAF6-4C50-8D44-5AA5E803A626",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.0\\(1e\\):*:*:*:*:*:*:*",
"matchCriteriaId": "171D3C3B-CE1E-4B52-B6EE-C65655034F9B",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.0\\(2c\\):*:*:*:*:*:*:*",
"matchCriteriaId": "E5DD19B5-2EEE-4ADC-8213-B9FD1BD9C135",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.0\\(2d\\):*:*:*:*:*:*:*",
"matchCriteriaId": "1FE1D17E-E57A-4469-A2F0-FDA4FDCBC523",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888."
},
{
"lang": "es",
"value": "Una secuencia de comandos CGI no especificada en Cisco FX-OS en versiones anteriores a 1.1.2 en dispositivos Firepower 9000 y Cisco Unified Computing System (UCS) Manager en versiones anteriores a 2.2(4b), 2.2(5) en versiones anteriores a 2.2(5a) y 3.0 en versiones anteriores a 3.0(2e) permite a atacantes remotos ejecutar comandos shell arbitrarios a trav\u00e9s de una petici\u00f3n HTTP manipulada, tambi\u00e9n conocido como Bug ID CSCur90888."
}
],
"id": "CVE-2015-6435",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "HIGH",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "COMPLETE",
"baseScore": 10.0,
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary"
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2016-01-22T11:59:01.473",
"references": [
{
"source": "psirt@cisco.com",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html"
},
{
"source": "psirt@cisco.com",
"tags": [
"Vendor Advisory"
],
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm"
},
{
"source": "psirt@cisco.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1034743"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Exploit",
"Third Party Advisory",
"VDB Entry"
],
"url": "http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1034743"
}
],
"sourceIdentifier": "psirt@cisco.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-78"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…