CVE-2015-6435
Summary
| CVE | CVE-2015-6435 |
|---|---|
| State | PUBLISHED |
| Assigner | cisco |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-01-22 11:59:01 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888. |
Risk And Classification
Primary CVSS: v3.0 9.8 CRITICAL from [email protected]
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Problem Types: CWE-78 | n/a
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 9.8 | CRITICAL | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | [email protected] | Primary | 10 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Cisco | Firepower Extensible Operating System | 1.1.1 | All | All | All |
| Operating System | Cisco | Firepower Extensible Operating System | 1.1\(1.160\) | All | All | All |
| Operating System | Cisco | Firepower Extensible Operating System | 1.1\(1.86\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.0\(2k\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.0_base | All | All | All |
| Application | Cisco | Unified Computing System | 1.1\(1m\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.1_base | All | All | All |
| Application | Cisco | Unified Computing System | 1.2\(1d\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.2_base | All | All | All |
| Application | Cisco | Unified Computing System | 1.3\(1c\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.3\(1m\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.3\(1n\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.3\(1o\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.3\(1p\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.3\(1q\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.3\(1t\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.3\(1w\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.3\(1y\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.3_base | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(1i\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(1j\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(1m\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(3i\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(3l\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(3m\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(3q\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(3s\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(3u\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(3y\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(4f\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(4g\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(4i\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(4j\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4\(4k\) | All | All | All |
| Application | Cisco | Unified Computing System | 1.4_base | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(1m\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(1q\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(1s\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(1t\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(1w\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(1x\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(2m\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(2q\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(2r\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(3a\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(3b\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(3c\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(4a\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(4b\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(4d\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(5a\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(5b\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0\(5c\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.0_base | All | All | All |
| Application | Cisco | Unified Computing System | 2.1\(1a\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.1\(1b\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.1\(1d\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.1\(1e\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.1\(1f\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.1\(2a\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.1_base | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(1b\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(1c\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(1d\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(1e\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(1f\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(1g\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(1h\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(2c\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(2c\)a | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(3a\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(3b\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(3c\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(3d\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(3e\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(3f\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(3g\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(4b\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(4c\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2\(5a\) | All | All | All |
| Application | Cisco | Unified Computing System | 2.2_base | All | All | All |
| Application | Cisco | Unified Computing System | 3.0\(1c\) | All | All | All |
| Application | Cisco | Unified Computing System | 3.0\(1d\) | All | All | All |
| Application | Cisco | Unified Computing System | 3.0\(1e\) | All | All | All |
| Application | Cisco | Unified Computing System | 3.0\(2c\) | All | All | All |
| Application | Cisco | Unified Computing System | 3.0\(2d\) | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco UCS Manager 2.2(1d) Remote Command Execution ≈ Packet Storm | af854a3a-2127-422b-91ae-364da2661108 | packetstormsecurity.com | Exploit, Third Party Advisory, VDB Entry |
| Cisco Unified Computing System Manager CGI Script Lets Remote Users Execute Arbitrary Commands on the Target System - SecurityTracker | af854a3a-2127-422b-91ae-364da2661108 | www.securitytracker.com | Third Party Advisory, VDB Entry |
| Cisco Unified Computing System Manager and Cisco Firepower 9000 Remote Command Execution Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.