{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-01-20T00:00:00", "descriptions": [{"lang": "en", "value": "An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-01-18T17:06:07", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco"}, "references": [{"name": "1034743", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1034743"}, {"name": "20160120 Cisco Unified Computing System Manager and Cisco Firepower 9000 Remote Command Execution Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@cisco.com", "ID": "CVE-2015-6435", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "1034743", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1034743"}, {"name": "20160120 Cisco Unified Computing System Manager and Cisco Firepower 9000 Remote Command Execution Vulnerability", "refsource": "CISCO", "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm"}, {"name": "http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T07:22:21.494Z"}, "title": "CVE Program Container", "references": [{"name": "1034743", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1034743"}, {"name": "20160120 Cisco Unified Computing System Manager and Cisco Firepower 9000 Remote Command Execution Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html"}]}]}, "cveMetadata": {"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2015-6435", "datePublished": "2016-01-22T11:00:00", "dateReserved": "2015-08-17T00:00:00", "dateUpdated": "2024-08-06T07:22:21.494Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:firepower_extensible_operating_system:1.1\\(1.86\\):*:*:*:*:*:*:*", "matchCriteriaId": "0DCF5F07-33A1-48B3-B20A-FA6C13FDD469", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:firepower_extensible_operating_system:1.1\\(1.160\\):*:*:*:*:*:*:*", "matchCriteriaId": "5B9E0CD4-B484-4323-AC1D-A0817F0F8C49", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:firepower_extensible_operating_system:1.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "E313D2E5-70D2-4553-8A2C-9D129C20C857", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.0\\(2k\\):*:*:*:*:*:*:*", "matchCriteriaId": "99A5E1B0-4DC3-41E7-8560-56A94F06283B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.0_base:*:*:*:*:*:*:*", "matchCriteriaId": "87D49A41-C6A8-46EB-8128-EAF42B91C113", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.1\\(1m\\):*:*:*:*:*:*:*", "matchCriteriaId": "B88073EC-8B4F-4B87-9BF3-AEF78676C51E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.1_base:*:*:*:*:*:*:*", "matchCriteriaId": "6046C767-4302-4084-B615-058082219507", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.2\\(1d\\):*:*:*:*:*:*:*", "matchCriteriaId": "7D0E282D-5EF5-45E0-AE20-DB52AC2F62DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.2_base:*:*:*:*:*:*:*", "matchCriteriaId": "53DF6410-FE02-416A-9628-C43348F6C4A1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1c\\):*:*:*:*:*:*:*", "matchCriteriaId": "068F6305-38EB-4712-9EE3-BA77DEA87359", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1m\\):*:*:*:*:*:*:*", "matchCriteriaId": "E6324445-E24C-41E5-A2ED-CD2433CF00B2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1n\\):*:*:*:*:*:*:*", "matchCriteriaId": "2D018115-49B2-4481-BC89-BCD122A87856", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1o\\):*:*:*:*:*:*:*", "matchCriteriaId": "AEE866E2-20AA-493B-A18B-2996F5AD1EDE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1p\\):*:*:*:*:*:*:*", "matchCriteriaId": "485E1E2D-C985-4B8A-90CC-A792CCB54A19", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1q\\):*:*:*:*:*:*:*", "matchCriteriaId": "DC05BF73-91F4-4609-A995-743887D0288A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1t\\):*:*:*:*:*:*:*", "matchCriteriaId": "779EEBFE-4C19-4A98-9003-E8639C6000E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1w\\):*:*:*:*:*:*:*", "matchCriteriaId": "5609CA23-04A1-4308-B0BA-AC7CAF10168A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3\\(1y\\):*:*:*:*:*:*:*", "matchCriteriaId": "CADCBFF3-4EF3-4044-A6BD-87F1EFA3F400", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.3_base:*:*:*:*:*:*:*", "matchCriteriaId": "B35C1FFF-C436-4AE8-B600-54E1715479C4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(1i\\):*:*:*:*:*:*:*", "matchCriteriaId": "4572E676-A059-47B1-B551-575BDDE88DF6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(1j\\):*:*:*:*:*:*:*", "matchCriteriaId": "C2DA99C7-B65E-41E8-96BF-97AC4754FA11", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(1m\\):*:*:*:*:*:*:*", "matchCriteriaId": "CF0376E5-6ED5-4FBE-BBC9-49EE34F33FFB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3i\\):*:*:*:*:*:*:*", "matchCriteriaId": "E2B3DCC9-D55E-43AB-B3A4-74E875D90CF5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3l\\):*:*:*:*:*:*:*", "matchCriteriaId": "BFFD5DDE-F102-4BCE-B6FF-F933D9A6DBE1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3m\\):*:*:*:*:*:*:*", "matchCriteriaId": "BFC57665-4DB5-466C-9BC2-E3071C44EDF8", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3q\\):*:*:*:*:*:*:*", "matchCriteriaId": "2CA75F8F-2028-4A1D-86BC-4E28A7BEF482", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3s\\):*:*:*:*:*:*:*", "matchCriteriaId": "8A5476F9-F175-4DF2-8008-816DCA4C37C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3u\\):*:*:*:*:*:*:*", "matchCriteriaId": "A6C892C7-97A2-4E33-AE5C-7221EEA30924", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(3y\\):*:*:*:*:*:*:*", "matchCriteriaId": "5419EF64-2884-4A02-8F1D-3E14AC5BD656", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4f\\):*:*:*:*:*:*:*", "matchCriteriaId": "FF2382B3-898B-4667-9861-93237260F6AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4g\\):*:*:*:*:*:*:*", "matchCriteriaId": "610386C6-920B-48F8-BD9D-F03FE6B841A3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4i\\):*:*:*:*:*:*:*", "matchCriteriaId": "A2A4CF61-CE7A-4056-8767-15A513CD7625", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4j\\):*:*:*:*:*:*:*", "matchCriteriaId": "8B392281-1F3F-40F8-8DFE-79BCCBABE51A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4\\(4k\\):*:*:*:*:*:*:*", "matchCriteriaId": "9033AFEC-350E-43FA-852B-13E4B093C7A1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:1.4_base:*:*:*:*:*:*:*", "matchCriteriaId": "59AD6159-8E1B-49B7-A674-ABCBE735AEC3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(1m\\):*:*:*:*:*:*:*", "matchCriteriaId": "92A3688C-07A7-4512-961B-760F6409A870", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(1q\\):*:*:*:*:*:*:*", "matchCriteriaId": "022E46EF-EF65-4D1F-B4B1-47A4132D251A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(1s\\):*:*:*:*:*:*:*", "matchCriteriaId": "6033C22A-F8B4-4B23-907F-FDA63096DA50", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(1t\\):*:*:*:*:*:*:*", "matchCriteriaId": "63FBD6C9-9460-4859-8894-BA9C26852152", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(1w\\):*:*:*:*:*:*:*", "matchCriteriaId": "AEF91510-F611-4EFF-AFED-A028493263CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(1x\\):*:*:*:*:*:*:*", "matchCriteriaId": "58EFD9D0-BF36-45CC-962D-88135BD7C919", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(2m\\):*:*:*:*:*:*:*", "matchCriteriaId": "66EBA481-49EE-4D57-A3C3-DB654B2951D3", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(2q\\):*:*:*:*:*:*:*", "matchCriteriaId": "A9F95BDE-C353-418B-8BCF-F7BA8EE740D2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(2r\\):*:*:*:*:*:*:*", "matchCriteriaId": "44E4BCAD-D952-4BF8-A988-F2DA2510DC8B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(3a\\):*:*:*:*:*:*:*", "matchCriteriaId": "58E7E5FD-EDFA-457A-85B3-BDE687AB47BE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(3b\\):*:*:*:*:*:*:*", "matchCriteriaId": "F8BFE5B7-023F-4368-94E4-87B377C06855", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(3c\\):*:*:*:*:*:*:*", "matchCriteriaId": "A6658A81-E9D8-42CE-B89F-4B8B19B90EAC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(4a\\):*:*:*:*:*:*:*", "matchCriteriaId": "580A7A52-7A57-428A-8A4E-6C2DF4143170", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(4b\\):*:*:*:*:*:*:*", "matchCriteriaId": "46C89082-9755-47B5-B0C2-E77447EF1B59", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(4d\\):*:*:*:*:*:*:*", "matchCriteriaId": "ECD8BC5E-ED77-4526-87C7-C259C42A9889", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(5a\\):*:*:*:*:*:*:*", "matchCriteriaId": "3F78693A-AA54-44FD-AB16-E28C71B1E4EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(5b\\):*:*:*:*:*:*:*", "matchCriteriaId": "050A0BD8-AAEA-40D3-9834-88AC7B34F3E0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0\\(5c\\):*:*:*:*:*:*:*", "matchCriteriaId": "95C9B496-F0D0-45C3-8D38-102DB174F0AD", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.0_base:*:*:*:*:*:*:*", "matchCriteriaId": "09C58C35-F8CD-4432-B33C-2AAFEFF3C0EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1\\(1a\\):*:*:*:*:*:*:*", "matchCriteriaId": "3697BA4C-EA25-4C91-8319-51AE7E3354BE", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1\\(1b\\):*:*:*:*:*:*:*", "matchCriteriaId": "8688217A-883D-46BE-8D9B-DBD22334252F", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1\\(1d\\):*:*:*:*:*:*:*", "matchCriteriaId": "95214EC8-C90F-484D-AA1E-559CFAD20307", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1\\(1e\\):*:*:*:*:*:*:*", "matchCriteriaId": "3160E911-2FA8-48D7-A467-FB1125092745", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1\\(1f\\):*:*:*:*:*:*:*", "matchCriteriaId": "57C64E54-BB97-4336-B988-C9C099C23FB4", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1\\(2a\\):*:*:*:*:*:*:*", "matchCriteriaId": "E3E1E439-295B-4F12-BDC4-0E12E60C5911", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.1_base:*:*:*:*:*:*:*", "matchCriteriaId": "068EF1CF-6BC8-45FA-A2CF-26E639EC8967", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1b\\):*:*:*:*:*:*:*", "matchCriteriaId": "859B1CD5-2005-4D86-B794-18E311AEDDA6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1c\\):*:*:*:*:*:*:*", "matchCriteriaId": "30F9E8E6-9F7D-4D3A-A952-B962219DC6C9", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1d\\):*:*:*:*:*:*:*", "matchCriteriaId": "B9D2CFFD-3050-4004-92F5-95E93DBB5560", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1e\\):*:*:*:*:*:*:*", "matchCriteriaId": "3CB02F09-0323-47B4-87A7-4BFC64915093", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1f\\):*:*:*:*:*:*:*", "matchCriteriaId": "853237D8-847B-48D9-8EB1-763530B98833", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1g\\):*:*:*:*:*:*:*", "matchCriteriaId": "62EB3042-14CE-43ED-A28E-FCE8A3CE0AD2", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(1h\\):*:*:*:*:*:*:*", "matchCriteriaId": "A57A4706-1AC1-4D21-A187-B59AD3FA4F30", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(2c\\):*:*:*:*:*:*:*", "matchCriteriaId": "17BC5C43-2B2F-479A-8BEF-69EC8465203B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(2c\\)a:*:*:*:*:*:*:*", "matchCriteriaId": "234C0F15-9E53-4C27-A0C3-DB124AC0959E", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3a\\):*:*:*:*:*:*:*", "matchCriteriaId": "430C45DB-B59A-40BD-A877-015155C2CEF1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3b\\):*:*:*:*:*:*:*", "matchCriteriaId": "9068CA60-F05F-4C32-9828-5E13C981C39C", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3c\\):*:*:*:*:*:*:*", "matchCriteriaId": "29835968-61B4-4508-B904-C277243E588A", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3d\\):*:*:*:*:*:*:*", "matchCriteriaId": "62AA4DDA-B12B-469B-BD8F-F3B6AE972476", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3e\\):*:*:*:*:*:*:*", "matchCriteriaId": "BD80F588-9699-42CC-8AB6-0D8A16353EBB", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3f\\):*:*:*:*:*:*:*", "matchCriteriaId": "BCCEB4B3-D5CC-485F-972F-75B22759A878", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(3g\\):*:*:*:*:*:*:*", "matchCriteriaId": "657080ED-79A8-41B1-88C6-C66400D413B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(4b\\):*:*:*:*:*:*:*", "matchCriteriaId": "8D3A6638-C070-41B9-B098-9217122F4689", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(4c\\):*:*:*:*:*:*:*", "matchCriteriaId": "3005E846-EAE3-4B91-8AC2-96CF2D53CDC0", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2\\(5a\\):*:*:*:*:*:*:*", "matchCriteriaId": "1E32A101-DCE5-4057-B89A-DA2910FE3E06", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:2.2_base:*:*:*:*:*:*:*", "matchCriteriaId": "280856B2-45F4-413B-AA46-1B1741626584", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.0\\(1c\\):*:*:*:*:*:*:*", "matchCriteriaId": "F96C8D0C-B97C-4F92-A15E-52E312CB7837", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.0\\(1d\\):*:*:*:*:*:*:*", "matchCriteriaId": "AA860437-AAF6-4C50-8D44-5AA5E803A626", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.0\\(1e\\):*:*:*:*:*:*:*", "matchCriteriaId": "171D3C3B-CE1E-4B52-B6EE-C65655034F9B", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.0\\(2c\\):*:*:*:*:*:*:*", "matchCriteriaId": "E5DD19B5-2EEE-4ADC-8213-B9FD1BD9C135", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:unified_computing_system:3.0\\(2d\\):*:*:*:*:*:*:*", "matchCriteriaId": "1FE1D17E-E57A-4469-A2F0-FDA4FDCBC523", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888."}, {"lang": "es", "value": "Una secuencia de comandos CGI no especificada en Cisco FX-OS en versiones anteriores a 1.1.2 en dispositivos Firepower 9000 y Cisco Unified Computing System (UCS) Manager en versiones anteriores a 2.2(4b), 2.2(5) en versiones anteriores a 2.2(5a) y 3.0 en versiones anteriores a 3.0(2e) permite a atacantes remotos ejecutar comandos shell arbitrarios a trav\u00e9s de una petici\u00f3n HTTP manipulada, tambi\u00e9n conocido como Bug ID CSCur90888."}], "id": "CVE-2015-6435", "lastModified": "2024-11-21T02:34:59.503", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-01-22T11:59:01.473", "references": [{"source": "ykramarz@cisco.com", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html"}, {"source": "ykramarz@cisco.com", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm"}, {"source": "ykramarz@cisco.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1034743"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1034743"}], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-78"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}