{"api_version":"1","generated_at":"2026-07-23T12:12:50+00:00","cve":"CVE-2015-0739","urls":{"html":"https://cve.report/CVE-2015-0739","api":"https://cve.report/api/cve/CVE-2015-0739.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2015-0739","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2015-0739"},"summary":{"title":"CVE-2015-0739","description":"The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.","state":"PUBLISHED","assigner":"cisco","published_at":"2015-05-19 02:00:18","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-20","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4","severity":"","vector":"AV:N/AC:L/Au:S/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securitytracker.com/id/1032359","name":"http://www.securitytracker.com/id/1032359","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Cisco FireSIGHT Sourcefire 3D System Input Validation Flaw Lets Remote Authenticated Users Upload Arbitrary Files - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/74709","name":"http://www.securityfocus.com/bid/74709","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"Cisco Sourcefire 3D System Lights-Out Management CVE-2015-0739 Arbitrary File Upload Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=38905","name":"http://tools.cisco.com/security/center/viewAlert.x?alertId=38905","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco Sourcefire 3D System Lights-Out Management Arbitrary File Upload Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-0739","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-0739","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2015","cve_id":"739","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"firesight_system_software","cpe6":"5.3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"739","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"sourcefire_3d1000_sensor","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"739","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"sourcefire_3d2000_sensor","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"739","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"sourcefire_3d2100_sensor","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"739","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"sourcefire_3d2500_sensor","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"739","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"sourcefire_3d3500_sensor","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"739","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"sourcefire_3d4500_sensor","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"739","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"sourcefire_3d500_sensor","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"739","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"sourcefire_3d6500_sensor","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2015","cve_id":"739","vulnerable":"0","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"sourcefire_3d9900_sensor","cpe6":"-","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T04:17:32.823Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"74709","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/74709"},{"name":"20150518 Cisco Sourcefire 3D System Lights-Out Management Arbitrary File Upload Vulnerability","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=38905"},{"name":"1032359","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1032359"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2015-05-18T00:00:00.000Z","descriptions":[{"lang":"en","value":"The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-12-30T15:57:01.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"74709","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/74709"},{"name":"20150518 Cisco Sourcefire 3D System Lights-Out Management Arbitrary File Upload Vulnerability","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=38905"},{"name":"1032359","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1032359"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2015-0739","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"74709","refsource":"BID","url":"http://www.securityfocus.com/bid/74709"},{"name":"20150518 Cisco Sourcefire 3D System Lights-Out Management Arbitrary File Upload Vulnerability","refsource":"CISCO","url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=38905"},{"name":"1032359","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1032359"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2015-0739","datePublished":"2015-05-19T01:00:00.000Z","dateReserved":"2015-01-07T00:00:00.000Z","dateUpdated":"2024-08-06T04:17:32.823Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2015-05-19 02:00:18","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-20","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:N/I:P/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:firesight_system_software:5.3.0:*:*:*:*:*:*:*","matchCriteriaId":"F1049BCE-4A7B-4636-9090-17724D5AFBA4"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sourcefire_3d1000_sensor:-:*:*:*:*:*:*:*","matchCriteriaId":"B7A066EF-EAD4-44D1-AB1E-BB7629E82696"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sourcefire_3d2000_sensor:-:*:*:*:*:*:*:*","matchCriteriaId":"0D6EB6E8-B0BB-4892-9E64-AD93F99421E4"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sourcefire_3d2100_sensor:-:*:*:*:*:*:*:*","matchCriteriaId":"BB00143A-C300-445C-83A8-5F7ABFDA3498"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sourcefire_3d2500_sensor:-:*:*:*:*:*:*:*","matchCriteriaId":"CF02BCE6-681E-4C3D-B71A-2F5F5F1076DB"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sourcefire_3d3500_sensor:-:*:*:*:*:*:*:*","matchCriteriaId":"57E3F75C-69F7-42D3-A894-1F741CF709B5"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sourcefire_3d4500_sensor:-:*:*:*:*:*:*:*","matchCriteriaId":"873539C5-BCB6-426E-B0FA-AF006E533125"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sourcefire_3d500_sensor:-:*:*:*:*:*:*:*","matchCriteriaId":"3B0EF103-6C18-4B4F-8F1C-9E3D9C518FDF"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sourcefire_3d6500_sensor:-:*:*:*:*:*:*:*","matchCriteriaId":"BDDEB665-DEE2-4707-92CD-32E0C2F5BCD5"},{"vulnerable":false,"criteria":"cpe:2.3:h:cisco:sourcefire_3d9900_sensor:-:*:*:*:*:*:*:*","matchCriteriaId":"0188534F-6DF6-436E-A774-E864D87C90C8"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2015","CveId":"739","Ordinal":"1","Title":"CVE-2015-0739","CVE":"CVE-2015-0739","Year":"2015"},"notes":[{"CveYear":"2015","CveId":"739","Ordinal":"1","NoteData":"The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.","Type":"Description","Title":"CVE-2015-0739"},{"CveYear":"2015","CveId":"739","Ordinal":"2","NoteData":"2015-05-18","Type":"Other","Title":"Published"},{"CveYear":"2015","CveId":"739","Ordinal":"3","NoteData":"2016-12-30","Type":"Other","Title":"Modified"}]}}}