CVE-2016-1345 Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bu...
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bug ID CSCux22726.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco asa with firepower services | = 5.4.0 | No fix listed |
| cisco asa with firepower services | = 5.4.0.1 | No fix listed |
| cisco asa with firepower services | = 5.4.0.2 | No fix listed |
| cisco asa with firepower services | = 5.4.0.3 | No fix listed |
| cisco asa with firepower services | = 5.4.0.4 | No fix listed |
| cisco asa with firepower services | = 5.4.0.5 | No fix listed |
| cisco asa with firepower services | = 5.4.0.6 | No fix listed |
| cisco asa with firepower services | = 6.0.0 | No fix listed |
| cisco asa with firepower services | = 6.0.0.1 | No fix listed |
| cisco firesight system software | = 5.4.0 | No fix listed |
| cisco firesight system software | = 5.4.0.1 | No fix listed |
| cisco firesight system software | = 5.4.0.2 | No fix listed |
| cisco firesight system software | = 5.4.0.3 | No fix listed |
| cisco firesight system software | = 5.4.0.4 | No fix listed |
| cisco firesight system software | = 5.4.0.5 | No fix listed |
| cisco firesight system software | = 5.4.0.6 | No fix listed |
| cisco firesight system software | = 5.4.1 | No fix listed |
| cisco firesight system software | = 5.4.1.2 | No fix listed |
| cisco firesight system software | = 5.4.1.3 | No fix listed |
| cisco firesight system software | = 5.4.1.4 | No fix listed |
| cisco firesight system software | = 6.0.0 | No fix listed |
| cisco firesight system software | = 6.0.0.1 | No fix listed |
| cisco firesight system software | = 6.0.1 | No fix listed |
References
- 20160330 Cisco Firepower Malware Block Bypass Vulnerability vendor-advisory
- 1035437 vdb-entry
- 1035438 vdb-entry
- 1035439 vdb-entry