Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.0
CVE-2015-0739: Cisco FireSIGHT 5.3.0 lets remote users upload firmware files
CVE-2015-0739 · published 11 years ago
Summary
The FireSIGHT system software version 5.3.0 on Sourcefire 3D Sensor devices lets a signed‑in remote user upload arbitrary files to the device's management controller. This could allow the user to change how the hardware works or gain deeper access. Update to a newer software version or apply the vendor's recommended patch as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | firesight_system_software |
5.3.0 cpe:2.3:a:cisco:firesight_system_software:5.3.0:*:*:*:*:*:*:* |
Original advisory text
The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management C...
The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=38905 Vendor Advisory
- http://www.securityfocus.com/bid/74709 Third Party Advisory VDB Entry
- http://www.securitytracker.com/id/1032359 Third Party Advisory VDB Entry
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
4.0
Medium
Type
CWE-20Improper Input Validation
Timeline
Published19 May 2015
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2015-0739 · NVD
Track software like this
Free during beta