CVE-2015-6357

The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide an invalid package, and consequently execute arbitrary code, via a crafted certificate, aka Bug ID CSCuw06444.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

2.63% chance of exploitation in the next 30 days, 84th percentile

Published

2015-11-18

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://wadofstuff.blogspot.com.au/2015/11/cve-2015-6357-firepwner-exploit-for.html

References

• CVE Record
• NVD entry

Related

• CVE-2015-6306
• CVE-2015-6396
• CVE-2015-6305
• CVE-2015-6401
• CVE-2015-6240
• CVE-2015-6402