File Read Vulnerability in Cisco Firepower 9000 Devices

CVE-2015-6371

What is CVE-2015-6371?

The vulnerability enables remote authenticated users to exploit certain scripts in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices, allowing them to read arbitrary files through crafted parameters. This poses a serious risk as it could lead to unauthorized access to sensitive information stored on the affected systems. Organizations using Cisco Firepower 9000 devices should promptly review and implement the necessary security patches provided in the Cisco advisory to mitigate this vulnerability.

References