cnvd - cnvd-2015-05066

cnvd-2015-05066

Vulnerability from cnvd

Title: Cisco Firepower 9000 Series设备信息泄露漏洞

Description:

Cisco Firepower Extensible Operating System on Firepower 9000 device是美国思科（Cisco）公司的一套运行于9000系列防火墙设备中的操作系统。

Cisco Firepower 9000设备上的Cisco Firepower Extensible Operating System 1.1(1.86)版本中存在安全漏洞，该漏洞源于程序未能正确执行身份验证。远程攻击者可通过访问Web页面利用该漏洞绕过既定的访问限制，获取敏感的设备信息。

Severity: 中

Formal description:

目前没有详细解决方案提供： http://www.cisco.com/

Reference: http://www.securityfocus.com/bid/76057 http://tools.cisco.com/security/center/viewAlert.x?alertId=40136

Impacted products

Name
Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "76057"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-4287"
    }
  },
  "description": "Cisco Firepower Extensible Operating System on Firepower 9000 device\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u4e00\u5957\u8fd0\u884c\u4e8e9000\u7cfb\u5217\u9632\u706b\u5899\u8bbe\u5907\u4e2d\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002\r\n\r\nCisco Firepower 9000\u8bbe\u5907\u4e0a\u7684Cisco Firepower Extensible Operating System 1.1(1.86)\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u672a\u80fd\u6b63\u786e\u6267\u884c\u8eab\u4efd\u9a8c\u8bc1\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u8bbf\u95eeWeb\u9875\u9762\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u65e2\u5b9a\u7684\u8bbf\u95ee\u9650\u5236\uff0c\u83b7\u53d6\u654f\u611f\u7684\u8bbe\u5907\u4fe1\u606f\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\uff1a\r\nhttp://www.cisco.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-05066",
  "openTime": "2015-08-03",
  "products": {
    "product": "Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000"
  },
  "referenceLink": "http://www.securityfocus.com/bid/76057\r\nhttp://tools.cisco.com/security/center/viewAlert.x?alertId=40136",
  "serverity": "\u4e2d",
  "submitTime": "2015-07-30",
  "title": "Cisco Firepower 9000 Series\u8bbe\u5907\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}

CVE-2015-4287 (GCVE-0-2015-4287)

Vulnerability from cvelistv5

Published

2015-07-29 01:00

Modified

2024-08-06 06:11

Severity ?

CWE

Summary

Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000 devices allows remote attackers to bypass intended access restrictions and obtain sensitive device information by visiting an unspecified web page, aka Bug ID CSCuu82230.

References

▼	URL	Tags
	http://tools.cisco.com/security/center/viewAlert.x?alertId=40136	vendor-advisory, x_refsource_CISCO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:11:12.630Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20150727 Cisco Firepower 9000 Series Unauthenticated Web Page Vulnerability",
            "tags": [
              "vendor-advisory",
              "x_refsource_CISCO",
              "x_transferred"
            ],
            "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=40136"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-07-27T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000 devices allows remote attackers to bypass intended access restrictions and obtain sensitive device information by visiting an unspecified web page, aka Bug ID CSCuu82230."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-07-29T01:57:03",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "20150727 Cisco Firepower 9000 Series Unauthenticated Web Page Vulnerability",
          "tags": [
            "vendor-advisory",
            "x_refsource_CISCO"
          ],
          "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=40136"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2015-4287",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000 devices allows remote attackers to bypass intended access restrictions and obtain sensitive device information by visiting an unspecified web page, aka Bug ID CSCuu82230."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20150727 Cisco Firepower 9000 Series Unauthenticated Web Page Vulnerability",
              "refsource": "CISCO",
              "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=40136"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2015-4287",
    "datePublished": "2015-07-29T01:00:00",
    "dateReserved": "2015-06-04T00:00:00",
    "dateUpdated": "2024-08-06T06:11:12.630Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted