CVE-2016-6396 Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted...
MediumCVSS 5.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco firesight system software | = 5.1.0 | No fix listed |
| cisco firesight system software | = 5.1.0.1 | No fix listed |
| cisco firesight system software | = 5.1.0.2 | No fix listed |
| cisco firesight system software | = 5.1.0.3 | No fix listed |
| cisco firesight system software | = 5.1.1 | No fix listed |
| cisco firesight system software | = 5.1.1.1 | No fix listed |
| cisco firesight system software | = 5.1.1.2 | No fix listed |
| cisco firesight system software | = 5.1.1.3 | No fix listed |
| cisco firesight system software | = 5.1.1.4 | No fix listed |
| cisco firesight system software | = 5.1.1.5 | No fix listed |
| cisco firesight system software | = 5.1.1.6 | No fix listed |
| cisco firesight system software | = 5.1.1.8 | No fix listed |
| cisco firesight system software | = 5.1.1.9 | No fix listed |
| cisco firesight system software | = 5.1.1.10 | No fix listed |
| cisco firesight system software | = 5.1.1.11 | No fix listed |
| cisco firesight system software | = 5.2.0 | No fix listed |
| cisco firesight system software | = 5.2.0.1 | No fix listed |
| cisco firesight system software | = 5.2.0.2 | No fix listed |
| cisco firesight system software | = 5.2.0.3 | No fix listed |
| cisco firesight system software | = 5.2.0.4 | No fix listed |
| cisco firesight system software | = 5.2.0.5 | No fix listed |
| cisco firesight system software | = 5.2.0.6 | No fix listed |
| cisco firesight system software | = 5.2.0.8 | No fix listed |
| cisco firesight system software | = 5.3.0 | No fix listed |
| cisco firesight system software | = 5.3.0.1 | No fix listed |
Show 27 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco firesight system software | = 5.3.0.2 | No fix listed |
| cisco firesight system software | = 5.3.0.3 | No fix listed |
| cisco firesight system software | = 5.3.0.4 | No fix listed |
| cisco firesight system software | = 5.3.0.5 | No fix listed |
| cisco firesight system software | = 5.3.0.6 | No fix listed |
| cisco firesight system software | = 5.3.0.7 | No fix listed |
| cisco firesight system software | = 5.3.1 | No fix listed |
| cisco firesight system software | = 5.3.1.1 | No fix listed |
| cisco firesight system software | = 5.3.1.2 | No fix listed |
| cisco firesight system software | = 5.3.1.3 | No fix listed |
| cisco firesight system software | = 5.3.1.4 | No fix listed |
| cisco firesight system software | = 5.3.1.5 | No fix listed |
| cisco firesight system software | = 5.3.1.7 | No fix listed |
| cisco firesight system software | = 5.4.0 | No fix listed |
| cisco firesight system software | = 5.4.0.1 | No fix listed |
| cisco firesight system software | = 5.4.0.2 | No fix listed |
| cisco firesight system software | = 5.4.0.3 | No fix listed |
| cisco firesight system software | = 5.4.0.4 | No fix listed |
| cisco firesight system software | = 5.4.0.5 | No fix listed |
| cisco firesight system software | = 5.4.0.6 | No fix listed |
| cisco firesight system software | = 5.4.1 | No fix listed |
| cisco firesight system software | = 5.4.1.2 | No fix listed |
| cisco firesight system software | = 5.4.1.3 | No fix listed |
| cisco firesight system software | = 5.4.1.4 | No fix listed |
| cisco firesight system software | = 6.0.0 | No fix listed |
| cisco firesight system software | = 6.0.0.1 | No fix listed |
| cisco firesight system software | = 6.0.1 | No fix listed |
References
- 20160907 Cisco Firepower Management Center and FireSIGHT System Software Malware Bypass Vulnerability vendor-advisory
- 92826 vdb-entry
- 1036756 vdb-entry