Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-6435

An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888.

Published

2016-01-22T11:59:01.473

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco firepower_extensible_operating_system 1.1\(1.86\) Yes
Operating System cisco firepower_extensible_operating_system 1.1\(1.160\) Yes
Operating System cisco firepower_extensible_operating_system 1.1.1 Yes
Application cisco unified_computing_system 1.0\(2k\) Yes
Application cisco unified_computing_system 1.0_base Yes
Application cisco unified_computing_system 1.1\(1m\) Yes
Application cisco unified_computing_system 1.1_base Yes
Application cisco unified_computing_system 1.2\(1d\) Yes
Application cisco unified_computing_system 1.2_base Yes
Application cisco unified_computing_system 1.3\(1c\) Yes
Application cisco unified_computing_system 1.3\(1m\) Yes
Application cisco unified_computing_system 1.3\(1n\) Yes
Application cisco unified_computing_system 1.3\(1o\) Yes
Application cisco unified_computing_system 1.3\(1p\) Yes
Application cisco unified_computing_system 1.3\(1q\) Yes
Application cisco unified_computing_system 1.3\(1t\) Yes
Application cisco unified_computing_system 1.3\(1w\) Yes
Application cisco unified_computing_system 1.3\(1y\) Yes
Application cisco unified_computing_system 1.3_base Yes
Application cisco unified_computing_system 1.4\(1i\) Yes
Application cisco unified_computing_system 1.4\(1j\) Yes
Application cisco unified_computing_system 1.4\(1m\) Yes
Application cisco unified_computing_system 1.4\(3i\) Yes
Application cisco unified_computing_system 1.4\(3l\) Yes
Application cisco unified_computing_system 1.4\(3m\) Yes
Application cisco unified_computing_system 1.4\(3q\) Yes
Application cisco unified_computing_system 1.4\(3s\) Yes
Application cisco unified_computing_system 1.4\(3u\) Yes
Application cisco unified_computing_system 1.4\(3y\) Yes
Application cisco unified_computing_system 1.4\(4f\) Yes
Application cisco unified_computing_system 1.4\(4g\) Yes
Application cisco unified_computing_system 1.4\(4i\) Yes
Application cisco unified_computing_system 1.4\(4j\) Yes
Application cisco unified_computing_system 1.4\(4k\) Yes
Application cisco unified_computing_system 1.4_base Yes
Application cisco unified_computing_system 2.0\(1m\) Yes
Application cisco unified_computing_system 2.0\(1q\) Yes
Application cisco unified_computing_system 2.0\(1s\) Yes
Application cisco unified_computing_system 2.0\(1t\) Yes
Application cisco unified_computing_system 2.0\(1w\) Yes
Application cisco unified_computing_system 2.0\(1x\) Yes
Application cisco unified_computing_system 2.0\(2m\) Yes
Application cisco unified_computing_system 2.0\(2q\) Yes
Application cisco unified_computing_system 2.0\(2r\) Yes
Application cisco unified_computing_system 2.0\(3a\) Yes
Application cisco unified_computing_system 2.0\(3b\) Yes
Application cisco unified_computing_system 2.0\(3c\) Yes
Application cisco unified_computing_system 2.0\(4a\) Yes
Application cisco unified_computing_system 2.0\(4b\) Yes
Application cisco unified_computing_system 2.0\(4d\) Yes
Application cisco unified_computing_system 2.0\(5a\) Yes
Application cisco unified_computing_system 2.0\(5b\) Yes
Application cisco unified_computing_system 2.0\(5c\) Yes
Application cisco unified_computing_system 2.0_base Yes
Application cisco unified_computing_system 2.1\(1a\) Yes
Application cisco unified_computing_system 2.1\(1b\) Yes
Application cisco unified_computing_system 2.1\(1d\) Yes
Application cisco unified_computing_system 2.1\(1e\) Yes
Application cisco unified_computing_system 2.1\(1f\) Yes
Application cisco unified_computing_system 2.1\(2a\) Yes
Application cisco unified_computing_system 2.1_base Yes
Application cisco unified_computing_system 2.2\(1b\) Yes
Application cisco unified_computing_system 2.2\(1c\) Yes
Application cisco unified_computing_system 2.2\(1d\) Yes
Application cisco unified_computing_system 2.2\(1e\) Yes
Application cisco unified_computing_system 2.2\(1f\) Yes
Application cisco unified_computing_system 2.2\(1g\) Yes
Application cisco unified_computing_system 2.2\(1h\) Yes
Application cisco unified_computing_system 2.2\(2c\) Yes
Application cisco unified_computing_system 2.2\(2c\)a Yes
Application cisco unified_computing_system 2.2\(3a\) Yes
Application cisco unified_computing_system 2.2\(3b\) Yes
Application cisco unified_computing_system 2.2\(3c\) Yes
Application cisco unified_computing_system 2.2\(3d\) Yes
Application cisco unified_computing_system 2.2\(3e\) Yes
Application cisco unified_computing_system 2.2\(3f\) Yes
Application cisco unified_computing_system 2.2\(3g\) Yes
Application cisco unified_computing_system 2.2\(4b\) Yes
Application cisco unified_computing_system 2.2\(4c\) Yes
Application cisco unified_computing_system 2.2\(5a\) Yes
Application cisco unified_computing_system 2.2_base Yes
Application cisco unified_computing_system 3.0\(1c\) Yes
Application cisco unified_computing_system 3.0\(1d\) Yes
Application cisco unified_computing_system 3.0\(1e\) Yes
Application cisco unified_computing_system 3.0\(2c\) Yes
Application cisco unified_computing_system 3.0\(2d\) Yes
References