CVE-2015-6357

Currently unrated

Key Information:

Vendor
Cisco
Status
Firesight System Software
Vendor
CVE Published:
18 November 2015

Badges

👾 Exploit Exists🟡 Public PoC

Summary

The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certificate of the support.sourcefire.com SSL server, which allows man-in-the-middle attackers to spoof this server and provide an invalid package, and consequently execute arbitrary code, via a crafted certificate, aka Bug ID CSCuw06444.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

firepwner
Created by mattimustang

References

http://www.securitytracker.com/id/1034161
vdb-entryx_refsource_SECTRACK
http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO
http://packetstormsecurity.com/files/134390/Cisco-FireSIG...
x_refsource_MISC

Timeline

  • Vulnerability published

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability Reserved

.