CVE-2016-1463 Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug ID CSCuz20737.
HighCVSS 7.5
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug ID CSCuz20737.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco firesight system software | = 5.3.0 | No fix listed |
| cisco firesight system software | = 5.3.1 | No fix listed |
| cisco firesight system software | = 5.4.0 | No fix listed |
| cisco firesight system software | = 6.0.0 | No fix listed |
| cisco firesight system software | = 6.0.1 | No fix listed |
References
- 20160727 Cisco FireSIGHT System Software Snort Rule Bypass Vulnerability vendor-advisory
- 92152 vdb-entry
- 1036471 vdb-entry