Firesight System Software@5.3.0 Security Vulnerabilities and Issues — Firesight System Software@5.3.0 CVE List

Lucene search

CiscoFiresight System Software5.3.0

4 matches found

CVE•added 2015/12/18 11:59 a.m.•46 views

CVE-2015-6427

Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules via an SSL session that is mishandled after decryption, aka Bug ID CSCux53437.

5CVSS6.9AI score0.00397EPSS

CVE•added 2015/12/12 4:59 p.m.•40 views

CVE-2015-6419

Cisco FireSIGHT Management Center with software 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote authenticated users to read arbitrary files via a crafted GET request, aka Bug ID CSCur25410.

6.8CVSS6.4AI score0.00224EPSS

CVE•added 2015/05/19 2:0 a.m.•38 views

CVE-2015-0739

The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.

4CVSS6.7AI score0.00283EPSS

CVE•added 2015/11/18 11:59 a.m.•37 views

CVE-2015-6357

The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide an invalid package, and consequently execute arbitrary code...

6.8CVSS7.1AI score0.05935EPSS