CVE:CVE-2015-6435
CNNVD:CNNVD-201601-601
Cisco Unified Computing System Manager和Cisco FX-OS on Firepower 9000都是美国思科（Cisco）公司的产品。前者是一套内嵌设备管理软件，它能将思科统一计算系统作为单一、高度可用的逻辑实体，从端到端加以管理，后者是一套运行于9000系列防火墙设备中的操作系统。 
Cisco UCS Manager和FX-OS for Firepower 9000 Series中的CGI脚本存在安全漏洞。远程攻击者可通过发送特制的HTTP请求利用该漏洞执行任意shell命令。以下产品及版本受到影响：Cisco UCS Manager 2.2(4b)之前版本，2.2(5a)之前2.2(5)版本，3.0(2e)之前3.0版本，FX-OS for Firepower 9000 Series 1.1.2之前版本。
solution:Upgrade cisco firepower_extensible_operating_system to a higher version than 1.1(1.86,1.1(1.160,1.1.1,and avoid the version 1.1(1.86),1.1(1.160),1.1.1; Upgrade cisco unified_computing_system to a higher version than 1.0(2k,1.0_base,1.1(1m,1.1_base,1.2(1d,1.2_base,1.3(1c,1.3(1m,1.3(1n,1.3(1o,1.3(1p,1.3(1q,1.3(1t,1.3(1w,1.3(1y,1.3_base,1.4(1i,1.4(1j,1.4(1m,1.4(3i,1.4(3l,1.4(3m,1.4(3q,1.4(3s,1.4(3u,1.4(3y,1.4(4f,1.4(4g,1.4(4i,1.4(4j,1.4(4k,1.4_base,2.0(1m,2.0(1q,2.0(1s,2.0(1t,2.0(1w,2.0(1x,2.0(2m,2.0(2q,2.0(2r,2.0(3a,2.0(3b,2.0(3c,2.0(4a,2.0(4b,2.0(4d,2.0(5a,2.0(5b,2.0(5c,2.0_base,2.1(1a,2.1(1b,2.1(1d,2.1(1e,2.1(1f,2.1(2a,2.1_base,2.2(1b,2.2(1c,2.2(1d,2.2(1e,2.2(1f,2.2(1g,2.2(1h,2.2(2c,2.2(2ca,2.2(3a,2.2(3b,2.2(3c,2.2(3d,2.2(3e,2.2(3f,2.2(3g,2.2(4b,2.2(4c,2.2(5a,2.2_base,3.0(1c,3.0(1d,3.0(1e,3.0(2c,3.0(2d,and avoid the version 1.0(2k),1.0_base,1.1(1m),1.1_base,1.2(1d),1.2_base,1.3(1c),1.3(1m),1.3(1n),1.3(1o),1.3(1p),1.3(1q),1.3(1t),1.3(1w),1.3(1y),1.3_base,1.4(1i),1.4(1j),1.4(1m),1.4(3i),1.4(3l),1.4(3m),1.4(3q),1.4(3s),1.4(3u),1.4(3y),1.4(4f),1.4(4g),1.4(4i),1.4(4j),1.4(4k),1.4_base,2.0(1m),2.0(1q),2.0(1s),2.0(1t),2.0(1w),2.0(1x),2.0(2m),2.0(2q),2.0(2r),2.0(3a),2.0(3b),2.0(3c),2.0(4a),2.0(4b),2.0(4d),2.0(5a),2.0(5b),2.0(5c),2.0_base,2.1(1a),2.1(1b),2.1(1d),2.1(1e),2.1(1f),2.1(2a),2.1_base,2.2(1b),2.2(1c),2.2(1d),2.2(1e),2.2(1f),2.2(1g),2.2(1h),2.2(2c),2.2(2c)a,2.2(3a),2.2(3b),2.2(3c),2.2(3d),2.2(3e),2.2(3f),2.2(3g),2.2(4b),2.2(4c),2.2(5a),2.2_base,3.0(1c),3.0(1d),3.0(1e),3.0(2c),3.0(2d)