CVE-2015-6357: The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X...

Security readout for executives and security teams

Cisco FireSIGHT Management Center versions 5.2 through 5.4.0.1 could trust a spoofed update server during rule updates. An attacker positioned to intercept that traffic could deliver a malicious update package and gain code execution. This affects a security management platform, so impact can be high where vulnerable versions remain in use. Exposure is limited to organizations running Cisco FireSIGHT Management Center 5.2 through 5.4.0.1 with rule updates reaching support.sourcefire.com over interceptable network paths. Internet exposure of the management UI is not the core issue; trust in the update channel is. High priority if vulnerable FireSIGHT Management Center versions remain deployed. The issue can turn a trusted security update process into a code execution path. If the product is retired or upgraded beyond the affected range, residual urgency is lower but should be documented. Mitigation focus: Identify all Cisco FireSIGHT Management Center deployments and versions.; Prioritize Cisco vendor guidance for fixed releases or supported workarounds.; Treat affected update channels as untrusted until remediation is confirmed..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.