CVE-2016-1394 Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain CLI access by leveraging knowledge of the password, aka Bug ID CSCuz56238.
HighCVSS 8.6
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain CLI access by leveraging knowledge of the password, aka Bug ID CSCuz56238.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco firesight system software | = 6.0.0 | No fix listed |
| cisco firesight system software | = 6.0.0.1 | No fix listed |
| cisco firesight system software | = 6.0.1 | No fix listed |
| cisco firesight system software | = 6.1.0 | No fix listed |
References
- 20160629 Cisco Firepower System Software Static Credential Vulnerability vendor-advisory
- 91503 vdb-entry