Command injection

2016-01-2211:59:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.9%

JSON

An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888.

CPENameOperatorVersion
firepower_extensible_operating_systemeq1.11.86
firepower_extensible_operating_systemeq1.11.160
firepower_extensible_operating_systemeq1.1.1
unified_computing_systemeq1.43.117
unified_computing_systemeq1.31.110
unified_computing_systemeq2.24.99
unified_computing_systemeq1.2.0-base
unified_computing_systemeq2.21.99
unified_computing_systemeq2.23.102
unified_computing_systemeq1.43.105

Name	Operator	Version
firepower_extensible_operating_system	eq	1.11.86
firepower_extensible_operating_system	eq	1.11.160
firepower_extensible_operating_system	eq	1.1.1
unified_computing_system	eq	1.43.117
unified_computing_system	eq	1.31.110
unified_computing_system	eq	2.24.99
unified_computing_system	eq	1.2.0-base
unified_computing_system	eq	2.21.99
unified_computing_system	eq	2.23.102
unified_computing_system	eq	1.43.105