CVE-2015-6370: The Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9...

Security readout for executives and security teams

CVE-2015-6370 is a Cisco Firepower 9000 issue where a local user on the Management I/O CLI could submit crafted input that runs OS commands as root. Business risk is highest where CLI access is not tightly limited to trusted administrators. The source bundle does not provide CVSS, fixed versions, or evidence of active exploitation. Exposure appears limited to Cisco Firepower 9000 devices running Cisco Firepower Extensible Operating System 1.1(1.160) with local CLI users. Organizations without this platform or version are not indicated as affected by the provided sources. Prioritize assessment if Firepower 9000 devices are in use, because successful abuse could give root-level control of security infrastructure. Urgency is lower where CLI access is tightly controlled and the affected version is absent. Mitigation focus: Check Cisco advisory cisco-sa-20151116-fire1 for vendor remediation guidance.; Inventory Firepower 9000 devices and confirm FXOS versions.; Restrict Management I/O CLI access to trusted administrators only..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.