PT-2016-4805 · Cisco · Cisco Firepower Management Center+1

Published 2016-08-18 · Updated 2024-11-26 · CVE-2016-1457

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center versions 4.x through 5.3.1.1 and versions 5.4.x before 5.4.0.1 Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services versions 4.x through 5.3.1.1 and versions 5.4.x before 5.4.0.1

Description The issue allows remote authenticated users to execute arbitrary commands as root via crafted HTTP requests.

Recommendations For Cisco Firepower Management Center versions 4.x through 5.3.1.1, update to version 5.3.1.2 or later. For Cisco Firepower Management Center version 5.4.x before 5.4.0.1, update to version 5.4.0.1 or later. For Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services versions 4.x through 5.3.1.1, update to version 5.3.1.2 or later. For Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services version 5.4.x before 5.4.0.1, update to version 5.4.0.1 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-1457

Affected Products

Cisco Asa

Cisco Firepower Management Center

References · 5

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-fmc · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1457 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1457 · Security Note
• http://securitytracker.com/id/1036642 · Note
• http://securityfocus.com/bid/92509 · Note