PT-2016-7693 · Cisco · Firesight System+1

CVE-2016-9193 · Publicado 2016-12-14 · Atualizado 2024-11-26

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center and FireSIGHT System Software versions 6.0.1.1 through 6.1.0

Description A vulnerability in the malicious file detection and blocking features could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. This issue affects systems configured to use a file policy that has the Block Malware action.

Recommendations For versions 6.0.1.1 through 6.1.0, consider reconfiguring the file policy to enhance malware detection until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2016-9193

Produtos afetados

Firesight System

Firepower Management Center

Referências · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-firepower · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-9193 · Aviso do Fabricante
• http://securitytracker.com/id/1037421 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-9193 · Nota de Segurança
• http://securityfocus.com/bid/94801 · Nota