4.9
CVSSv2

CVE-2015-6369

Published: 19/11/2015 Updated: 19/11/2015
CVSS v2 Base Score: 4.9 | Impact Score: 6.9 | Exploitability Score: 3.9
VMScore: 436
Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

The USB driver in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows physically proximate malicious users to cause a denial of service via a crafted USB device that triggers invalid USB commands, aka Bug ID CSCux10531.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco firepower extensible operating system 1.1\\(1.160\\)

Vendor Advisories

A vulnerability in the USB driver of Cisco Firepower 9000 could allow an unauthenticated, local attacker with physical access to the device to send invalid USB commands to the kernel and cause a denial of service (DoS) condition The vulnerability is due to insufficient sanitization of USB input parameters An attacker could exploit this vulnerab ...