CVE-2015-6435

Critical

Published: 22/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An unspecified CGI script in Cisco FX-OS before version 1.1.2 on Firepower 9000 devices and in Cisco UCS Manager before versions 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request.

Risk Assessment

Attackers can exploit this vulnerability to remotely execute commands, potentially leading to system takeover and data leakage.

Recommendation

It is recommended to update Cisco FX-OS to version 1.1.2 or later and Cisco UCS Manager to the appropriate versions to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888.