PT-2016-6872 · Cisco · Cisco Firepower Management Center+1

Published 2016-09-12 · Updated 2016-11-28 · CVE-2016-6396

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center versions prior to 6.1 Cisco FireSIGHT System Software versions prior to 6.1

Description The issue allows remote attackers to bypass malware detection via crafted fields in HTTP headers when certain malware blocking options are enabled.

Recommendations For Cisco Firepower Management Center versions prior to 6.1, update to version 6.1 or later. For Cisco FireSIGHT System Software versions prior to 6.1, update to version 6.1 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-6396

Affected Products

Cisco Firesight System

Cisco Firepower Management Center

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-6396 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsss1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6396 · Vendor Advisory
• http://securitytracker.com/id/1036756 · Note
• http://securityfocus.com/bid/92826 · Note