The vulnerability of the Cisco Firepower Extensible Operating System allows a hacker to inject any Web or HTML code.

The vulnerability of the Cisco Firepower Extensible Operating System’s web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary Web or HTML code by entering special parameters remote...

The vulnerability of the Cisco Firepower Extensible Operating System allows a hacker to read arbitrary files.

The vulnerability of the Cisco Firepower Extensible Operating System is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to read arbitrary files through a parameter transmitted using pre-prepared executable code...

The vulnerability of the Cisco Firepower Extensible Operating System allows a perpetrator to execute arbitrary operating system commands on behalf of the root user.

The vulnerability of the Cisco Firepower Extensible Operating System component exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command line. Exploiting this vulnerability allows a malicious actor, operating locally, to execute arbitrary...

The vulnerability of the Cisco Firepower Extensible Operating System allows a perpetrator to gain access to read the files.

The vulnerability of the Cisco Firepower Extensible Operating System is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to files through a specially crafted HTTP request...

The vulnerability of the Cisco Firepower Extensible Operating System allows a hacker to deploy malicious elements on the page and force the user to activate them.

The vulnerability of the Cisco Firepower Extensible Operating System’s web interface is related to the lack of restrictions on the use of IFRAME elements. Exploiting this vulnerability allows a malicious actor to deploy malicious elements on a page and force users to activate them through a...

The vulnerability of the Cisco Firepower Extensible Operating System allows a perpetrator to gain access to the authentication data of arbitrary users.

The vulnerability of the Cisco Firepower Extensible Operating System is related to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to the authentication credentials of arbitrary users...

Cisco Unified Computing System Manager and FX-OS for Firepower 9000 Series Remote Code Execution Vulnerability

Cisco Unified Computing System Manager and Cisco FX-OS on Firepower 9000 are both products of the U.S. company Cisco Cisco. The former is a set of embedded device management software, it can be Cisco Unified Computing System as a single, highly usable logical entity, from end to end to manage, th...

Cisco Unified Computing System Manager Remote Command Execution Vulnerability (cisco-sa-20160120-ucsm)

A vulnerability in a CGI script in the Cisco Unified Computing System UCS Manager could allow an unauthenticated, remote attacker to execute arbitrary commands on the Cisco UCS Manager. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources,...

Cisco Unified Computing System Manager and Cisco Firepower 9000 Remote Command Execution Vulnerability

A vulnerability in a CGI script in the Cisco Unified Computing System UCS Manager and the Cisco Firepower 9000 Series appliance could allow an unauthenticated, remote attacker to execute arbitrary commands on the Cisco UCS Manager or the Cisco Firepower 9000 Series appliance. The vulnerability is...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Modular Encoding Platform D9036 software, Unified Computing System UCS Manager software, and Firepower 9000 Series devices. Exploitation of these vulnerabilities could allow a remote attacker to take control of an affected device...

Cisco Firepower Management Center (FMC) Detection Consolidation

Consolidation of Cisco Firepower Management Center FMC detections. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cisco Firepower Management Center (FMC) Detection (SSH Login)

SSH login-based detection of Cisco Firepower Management Center FMC. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cisco Firepower Management Center (FMC) Detection (HTTP)

HTTP based detection of Cisco Firepower Management Center FMC. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cisco FirePOWER Management Center Software Version Information Disclosure Vulnerability (cisco-sa-20151209-fmc)

A vulnerability in Cisco FirePOWER Management Center could allow an unauthenticated, remote attacker to obtain information about the version of Cisco FirePOWER Management Center software that is running on an affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might ...

Cisco FirePOWER Management Center Software Information Disclosure Vulnerability

Cisco FirePOWER Management Center is the United States Cisco Cisco company's new generation of firewall management center software. An information disclosure vulnerability exists in Cisco FirePOWER Management Center Software. An attacker could exploit this vulnerability to gain access to sensitiv...

CVE-2015-6411

Cisco FirePOWER Management Center 5.4.1.3, 6.0.0, and 6.0.1 provides verbose responses to requests for help files, which allows remote attackers to obtain potentially sensitive version information by reading an unspecified field, aka Bug ID CSCux37061...

Design/Logic Flaw

Cisco FirePOWER Management Center 5.4.1.3, 6.0.0, and 6.0.1 provides verbose responses to requests for help files, which allows remote attackers to obtain potentially sensitive version information by reading an unspecified field, aka Bug ID CSCux37061...

CVE-2015-6411

Cisco FirePOWER Management Center 5.4.1.3, 6.0.0, and 6.0.1 provides verbose responses to requests for help files, which allows remote attackers to obtain potentially sensitive version information by reading an unspecified field, aka Bug ID CSCux37061...

CVE-2015-6411

Cisco FirePOWER Management Center is affected by CVE-2015-6411. Versions 5.4.1.3, 6.0.0, and 6.0.1 disclose potentially sensitive software version information via verbose responses when help files are requested, enabling an unauthenticated, remote attacker to read the disclosed field. The root ca...

CVE-2015-6411: Exposure of Sensitive Information to an Unauthorized Actor

Cisco FirePOWER Management Center 5.4.1.3, 6.0.0, and 6.0.1 provides verbose responses to requests for help files, which allows remote attackers to obtain potentially sensitive version information by reading an unspecified field, aka Bug ID CSCux37061...