VulnerabilityModified
CVE-2015-0739
The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors,…
MEDIUM 4.0EPSS 1.99%
Does this matter?
Lower severity and a low EPSS score (1.99%). Track it; it rarely justifies an emergency change on its own.
Description
The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.
- CVSS 2.0
- 4.0 MEDIUMAV:N/AC:L/Au:S/C:N/I:P/A:N
- EPSS
- 1.99% probability · 80th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/firesight system software
- Source
- psirt@cisco.com
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=38905Vendor Advisory
- http://www.securityfocus.com/bid/74709Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032359Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=38905Vendor Advisory
- http://www.securityfocus.com/bid/74709Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032359Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.