PT-2015-3042 · Cisco · Cisco Firepower Extensible Operating System

Published 2015-11-19 · Updated 2015-11-19 · CVE-2015-6374

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Extensible Operating System version 1.1(1.160)

Description The web interface in Cisco Firepower Extensible Operating System does not properly restrict the use of IFRAME elements. This makes it easier for remote attackers to conduct clickjacking attacks and other unspecified attacks via a crafted web site. The issue is related to the lack of restrictions on the use of IFRAME elements, which can allow a remote attacker to place malicious elements on a page and force the user to activate them using a specially formed web site.

Recommendations For Cisco Firepower Extensible Operating System version 1.1(1.160), consider restricting access to the web interface until a patch is available. As a temporary workaround, avoid using the web interface for sensitive operations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2016-00247

CVE-2015-6374

Affected Products

Cisco Firepower Extensible Operating System

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-6374 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151117-firepower4 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00247 · Security Note