PT-2016-7693 · Cisco · Firesight System+1

Published 2016-12-14 · Updated 2024-11-26 · CVE-2016-9193

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center and FireSIGHT System Software versions 6.0.1.1 through 6.1.0

Description A vulnerability in the malicious file detection and blocking features could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. This issue affects systems configured to use a file policy that has the Block Malware action.

Recommendations For versions 6.0.1.1 through 6.1.0, consider reconfiguring the file policy to enhance malware detection until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2016-9193

Affected Products

Firesight System

Firepower Management Center

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-firepower · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-9193 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-9193 · Security Note
• http://securitytracker.com/id/1037421 · Note
• http://securityfocus.com/bid/94801 · Note