Input validation

2015-11-2404:59:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

73.4%

JSON

An unspecified script in the web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to execute arbitrary OS commands via crafted parameters, aka Bug ID CSCux10622.

CPENameOperatorVersion
firepower_extensible_operating_systemeq1.11.160

CPE	Name	Operator	Version
	firepower_extensible_operating_system	eq	1.11.160

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151123-fire