The Lights-Out Management (LOM) implementation in Cisco FireSIGHT System Software 5.3.0 on Sourcefire 3D Sensor devices allows remote authenticated users to perform arbitrary Baseboard Management Controller (BMC) file uploads via unspecified vectors, aka Bug ID CSCus87938.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0739
Reference (s):
- BID:74709
- URL: http://www.securityfocus.com/bid/74709
- CISCO:20150518 Cisco Sourcefire 3D System Lights-Out Management Arbitrary File Upload Vulnerability
- URL: http://tools.cisco.com/security/center/viewAlert.x?alertId=38905
- SECTRACK:1032359