CVE-2015-6435

Published: Jan 22, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS) Manager before 2.2(4b), 2.2(5) before 2.2(5a), and 3.0 before 3.0(2e) allows remote attackers to execute arbitrary shell commands via a crafted HTTP request, aka Bug ID CSCur90888.

Affected (86)

Products: Cisco: Firepower Extensible Operating System, Unified Computing System

Cisco

2 products

Firepower Extensible Operating System

Unified Computing System

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Cisco Firepower Extensible Operating System	Version 1.1.1
Cisco Firepower Extensible Operating System	Version 1.1(1.160)
Cisco Firepower Extensible Operating System	Version 1.1(1.86)

Configuration B

83 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Computing System	Version 1.0(2k)
Cisco Unified Computing System	Version 1.0_base
Cisco Unified Computing System	Version 1.1(1m)
Cisco Unified Computing System	Version 1.1_base
Cisco Unified Computing System	Version 1.2(1d)
Cisco Unified Computing System	Version 1.2_base
Cisco Unified Computing System	Version 1.3(1c)
Cisco Unified Computing System	Version 1.3(1m)
Cisco Unified Computing System	Version 1.3(1n)
Cisco Unified Computing System	Version 1.3(1o)
Cisco Unified Computing System	Version 1.3(1p)
Cisco Unified Computing System	Version 1.3(1q)
Cisco Unified Computing System	Version 1.3(1t)
Cisco Unified Computing System	Version 1.3(1w)
Cisco Unified Computing System	Version 1.3(1y)
Cisco Unified Computing System	Version 1.3_base
Cisco Unified Computing System	Version 1.4(1i)
Cisco Unified Computing System	Version 1.4(1j)
Cisco Unified Computing System	Version 1.4(1m)
Cisco Unified Computing System	Version 1.4(3i)
Cisco Unified Computing System	Version 1.4(3l)
Cisco Unified Computing System	Version 1.4(3m)
Cisco Unified Computing System	Version 1.4(3q)
Cisco Unified Computing System	Version 1.4(3s)
Cisco Unified Computing System	Version 1.4(3u)
Cisco Unified Computing System	Version 1.4(3y)
Cisco Unified Computing System	Version 1.4(4f)
Cisco Unified Computing System	Version 1.4(4g)
Cisco Unified Computing System	Version 1.4(4i)
Cisco Unified Computing System	Version 1.4(4j)
Cisco Unified Computing System	Version 1.4(4k)
Cisco Unified Computing System	Version 1.4_base
Cisco Unified Computing System	Version 2.0(1m)
Cisco Unified Computing System	Version 2.0(1q)
Cisco Unified Computing System	Version 2.0(1s)
Cisco Unified Computing System	Version 2.0(1t)
Cisco Unified Computing System	Version 2.0(1w)
Cisco Unified Computing System	Version 2.0(1x)
Cisco Unified Computing System	Version 2.0(2m)
Cisco Unified Computing System	Version 2.0(2q)
Cisco Unified Computing System	Version 2.0(2r)
Cisco Unified Computing System	Version 2.0(3a)
Cisco Unified Computing System	Version 2.0(3b)
Cisco Unified Computing System	Version 2.0(3c)
Cisco Unified Computing System	Version 2.0(4a)
Cisco Unified Computing System	Version 2.0(4b)
Cisco Unified Computing System	Version 2.0(4d)
Cisco Unified Computing System	Version 2.0(5a)
Cisco Unified Computing System	Version 2.0(5b)
Cisco Unified Computing System	Version 2.0(5c)
Cisco Unified Computing System	Version 2.0_base
Cisco Unified Computing System	Version 2.1(1a)
Cisco Unified Computing System	Version 2.1(1b)
Cisco Unified Computing System	Version 2.1(1d)
Cisco Unified Computing System	Version 2.1(1e)
Cisco Unified Computing System	Version 2.1(1f)
Cisco Unified Computing System	Version 2.1(2a)
Cisco Unified Computing System	Version 2.1_base
Cisco Unified Computing System	Version 2.2(1b)
Cisco Unified Computing System	Version 2.2(1c)
Cisco Unified Computing System	Version 2.2(1d)
Cisco Unified Computing System	Version 2.2(1e)
Cisco Unified Computing System	Version 2.2(1f)
Cisco Unified Computing System	Version 2.2(1g)
Cisco Unified Computing System	Version 2.2(1h)
Cisco Unified Computing System	Version 2.2(2c)
Cisco Unified Computing System	Version 2.2(2c)a
Cisco Unified Computing System	Version 2.2(3a)
Cisco Unified Computing System	Version 2.2(3b)
Cisco Unified Computing System	Version 2.2(3c)
Cisco Unified Computing System	Version 2.2(3d)
Cisco Unified Computing System	Version 2.2(3e)
Cisco Unified Computing System	Version 2.2(3f)
Cisco Unified Computing System	Version 2.2(3g)
Cisco Unified Computing System	Version 2.2(4b)
Cisco Unified Computing System	Version 2.2(4c)
Cisco Unified Computing System	Version 2.2(5a)
Cisco Unified Computing System	Version 2.2_base
Cisco Unified Computing System	Version 3.0(1c)
Cisco Unified Computing System	Version 3.0(1d)
Cisco Unified Computing System	Version 3.0(1e)
Cisco Unified Computing System	Version 3.0(2c)
Cisco Unified Computing System	Version 3.0(2d)