CVE-2015-6435
Cisco UCS Manager 2.2(1d) Remote Command Execution
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888.
Una secuencia de comandos CGI no especificada en Cisco FX-OS en versiones anteriores a 1.1.2 en dispositivos Firepower 9000 y Cisco Unified Computing System (UCS) Manager en versiones anteriores a 2.2(4b), 2.2(5) en versiones anteriores a 2.2(5a) y 3.0 en versiones anteriores a 3.0(2e) permite a atacantes remotos ejecutar comandos shell arbitrarios a través de una petición HTTP manipulada, también conocido como Bug ID CSCur90888.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-08-17 CVE Reserved
- 2016-01-22 CVE Published
- 2023-08-06 EPSS Updated
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id/1034743 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| http://packetstormsecurity.com/files/160991/Cisco-UCS-Manager-2.2-1d-Remote-Command-Execution.html | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160120-ucsm | 2021-01-30 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | 1.1\(1.86\) Search vendor "Cisco" for product "Firepower Extensible Operating System" and version "1.1\(1.86\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | 1.1\(1.160\) Search vendor "Cisco" for product "Firepower Extensible Operating System" and version "1.1\(1.160\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Extensible Operating System Search vendor "Cisco" for product "Firepower Extensible Operating System" | 1.1.1 Search vendor "Cisco" for product "Firepower Extensible Operating System" and version "1.1.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.0\(2k\) Search vendor "Cisco" for product "Unified Computing System" and version "1.0\(2k\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.0_base Search vendor "Cisco" for product "Unified Computing System" and version "1.0_base" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.1\(1m\) Search vendor "Cisco" for product "Unified Computing System" and version "1.1\(1m\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.1_base Search vendor "Cisco" for product "Unified Computing System" and version "1.1_base" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.2\(1d\) Search vendor "Cisco" for product "Unified Computing System" and version "1.2\(1d\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.2_base Search vendor "Cisco" for product "Unified Computing System" and version "1.2_base" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.3\(1c\) Search vendor "Cisco" for product "Unified Computing System" and version "1.3\(1c\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.3\(1m\) Search vendor "Cisco" for product "Unified Computing System" and version "1.3\(1m\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.3\(1n\) Search vendor "Cisco" for product "Unified Computing System" and version "1.3\(1n\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.3\(1o\) Search vendor "Cisco" for product "Unified Computing System" and version "1.3\(1o\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.3\(1p\) Search vendor "Cisco" for product "Unified Computing System" and version "1.3\(1p\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.3\(1q\) Search vendor "Cisco" for product "Unified Computing System" and version "1.3\(1q\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.3\(1t\) Search vendor "Cisco" for product "Unified Computing System" and version "1.3\(1t\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.3\(1w\) Search vendor "Cisco" for product "Unified Computing System" and version "1.3\(1w\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.3\(1y\) Search vendor "Cisco" for product "Unified Computing System" and version "1.3\(1y\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.3_base Search vendor "Cisco" for product "Unified Computing System" and version "1.3_base" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(1i\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(1i\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(1j\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(1j\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(1m\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(1m\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(3i\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(3i\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(3l\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(3l\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(3m\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(3m\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(3q\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(3q\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(3s\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(3s\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(3u\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(3u\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(3y\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(3y\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(4f\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(4f\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(4g\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(4g\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(4i\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(4i\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(4j\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(4j\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4\(4k\) Search vendor "Cisco" for product "Unified Computing System" and version "1.4\(4k\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 1.4_base Search vendor "Cisco" for product "Unified Computing System" and version "1.4_base" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(1m\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(1m\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(1q\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(1q\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(1s\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(1s\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(1t\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(1t\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(1w\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(1w\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(1x\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(1x\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(2m\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(2m\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(2q\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(2q\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(2r\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(2r\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(3a\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(3a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(3b\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(3b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(3c\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(3c\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(4a\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(4a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(4b\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(4b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(4d\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(4d\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(5a\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(5a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(5b\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(5b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0\(5c\) Search vendor "Cisco" for product "Unified Computing System" and version "2.0\(5c\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.0_base Search vendor "Cisco" for product "Unified Computing System" and version "2.0_base" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.1\(1a\) Search vendor "Cisco" for product "Unified Computing System" and version "2.1\(1a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.1\(1b\) Search vendor "Cisco" for product "Unified Computing System" and version "2.1\(1b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.1\(1d\) Search vendor "Cisco" for product "Unified Computing System" and version "2.1\(1d\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.1\(1e\) Search vendor "Cisco" for product "Unified Computing System" and version "2.1\(1e\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.1\(1f\) Search vendor "Cisco" for product "Unified Computing System" and version "2.1\(1f\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.1\(2a\) Search vendor "Cisco" for product "Unified Computing System" and version "2.1\(2a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.1_base Search vendor "Cisco" for product "Unified Computing System" and version "2.1_base" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(1b\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(1b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(1c\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(1c\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(1d\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(1d\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(1e\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(1e\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(1f\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(1f\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(1g\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(1g\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(1h\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(1h\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(2c\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(2c\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(2c\)a Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(2c\)a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(3a\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(3a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(3b\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(3b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(3c\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(3c\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(3d\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(3d\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(3e\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(3e\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(3f\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(3f\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(3g\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(3g\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(4b\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(4b\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(4c\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(4c\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2\(5a\) Search vendor "Cisco" for product "Unified Computing System" and version "2.2\(5a\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 2.2_base Search vendor "Cisco" for product "Unified Computing System" and version "2.2_base" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 3.0\(1c\) Search vendor "Cisco" for product "Unified Computing System" and version "3.0\(1c\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 3.0\(1d\) Search vendor "Cisco" for product "Unified Computing System" and version "3.0\(1d\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 3.0\(1e\) Search vendor "Cisco" for product "Unified Computing System" and version "3.0\(1e\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 3.0\(2c\) Search vendor "Cisco" for product "Unified Computing System" and version "3.0\(2c\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Unified Computing System Search vendor "Cisco" for product "Unified Computing System" | 3.0\(2d\) Search vendor "Cisco" for product "Unified Computing System" and version "3.0\(2d\)" | - |
Affected
| ||||||