Command injection

2016-08-1819:59:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.7%

JSON

The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 allows remote authenticated users to execute arbitrary commands as root via crafted HTTP requests, aka Bug ID CSCur25513.

CPENameOperatorVersion
firepower_management_centereq5.3.0.4
firepower_management_centereq4.10.3.9
firepower_management_centereq5.3.1
firepower_management_centereq5.4.0
firepower_management_centereq5.2.0

Name	Operator	Version
firepower_management_center	eq	5.3.0.4
firepower_management_center	eq	4.10.3.9
firepower_management_center	eq	5.3.1
firepower_management_center	eq	5.4.0
firepower_management_center	eq	5.2.0