CVE-2015-0739
Last modified
CVE-2015-0739 is a vulnerability of currently unknown severity. The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.. EPSS estimates a 2.01% chance of exploitation in the next 30 days.
Description
The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Firesight System Software | 5.3.0 |
References
- http://www.securityfocus.com/bid/74709Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032359Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/74709Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032359Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-0739?
How severe is CVE-2015-0739?
How do I fix CVE-2015-0739?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-0733CRLF injection vulnerability in the HTTP Header Handler in D…
- CVE-2015-0734Multiple cross-site scripting (XSS) vulnerabilities on the C…
- CVE-2015-0735Cross-site request forgery (CSRF) vulnerability in Cisco Uni…
- CVE-2015-0736Cross-site request forgery (CSRF) vulnerability in Cisco Med…
- CVE-2015-0737Multiple cross-site scripting (XSS) vulnerabilities in Cisco…
- CVE-2015-0738Cross-site scripting (XSS) vulnerability in the Web Tracking…
- CVE-2015-0740Cross-site request forgery (CSRF) vulnerability in Cisco Uni…
- CVE-2015-0741Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2015-0742The Protocol Independent Multicast (PIM) application in Cisc…
- CVE-2015-0743Cisco Headend System Release allows remote attackers to caus…
- CVE-2015-0744Cisco DTA Control System (DTACS) 4.0.0.9 and Cisco Headend S…
- CVE-2015-0745Cisco Headend System Release allows remote attackers to read…
Are you affected by CVE-2015-0739?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST