CVE-2016-6417 Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrar...
HighCVSS 8.8
EPSS 0.63%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco firesight system software | = 4.10.2 | No fix listed |
| cisco firesight system software | = 4.10.2.1 | No fix listed |
| cisco firesight system software | = 4.10.2.2 | No fix listed |
| cisco firesight system software | = 4.10.2.3 | No fix listed |
| cisco firesight system software | = 4.10.2.4 | No fix listed |
| cisco firesight system software | = 4.10.2.5 | No fix listed |
| cisco firesight system software | = 4.10.3 | No fix listed |
| cisco firesight system software | = 4.10.3.1 | No fix listed |
| cisco firesight system software | = 4.10.3.2 | No fix listed |
| cisco firesight system software | = 4.10.3.3 | No fix listed |
| cisco firesight system software | = 4.10.3.4 | No fix listed |
| cisco firesight system software | = 4.10.3.5 | No fix listed |
| cisco firesight system software | = 4.10.3.6 | No fix listed |
| cisco firesight system software | = 4.10.3.7 | No fix listed |
| cisco firesight system software | = 4.10.3.8 | No fix listed |
| cisco firesight system software | = 4.10.3.9 | No fix listed |
| cisco firesight system software | = 4.10.3.10 | No fix listed |
| cisco firesight system software | = 5.1.0 | No fix listed |
| cisco firesight system software | = 5.1.0.1 | No fix listed |
| cisco firesight system software | = 5.1.0.2 | No fix listed |
| cisco firesight system software | = 5.1.0.3 | No fix listed |
| cisco firesight system software | = 5.1.1 | No fix listed |
| cisco firesight system software | = 5.1.1.1 | No fix listed |
| cisco firesight system software | = 5.1.1.2 | No fix listed |
| cisco firesight system software | = 5.1.1.3 | No fix listed |
Show 45 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco firesight system software | = 5.1.1.4 | No fix listed |
| cisco firesight system software | = 5.1.1.5 | No fix listed |
| cisco firesight system software | = 5.1.1.6 | No fix listed |
| cisco firesight system software | = 5.1.1.8 | No fix listed |
| cisco firesight system software | = 5.1.1.9 | No fix listed |
| cisco firesight system software | = 5.1.1.10 | No fix listed |
| cisco firesight system software | = 5.1.1.11 | No fix listed |
| cisco firesight system software | = 5.2.0 | No fix listed |
| cisco firesight system software | = 5.2.0.1 | No fix listed |
| cisco firesight system software | = 5.2.0.2 | No fix listed |
| cisco firesight system software | = 5.2.0.3 | No fix listed |
| cisco firesight system software | = 5.2.0.4 | No fix listed |
| cisco firesight system software | = 5.2.0.5 | No fix listed |
| cisco firesight system software | = 5.2.0.6 | No fix listed |
| cisco firesight system software | = 5.2.0.8 | No fix listed |
| cisco firesight system software | = 5.3.0 | No fix listed |
| cisco firesight system software | = 5.3.0.1 | No fix listed |
| cisco firesight system software | = 5.3.0.2 | No fix listed |
| cisco firesight system software | = 5.3.0.3 | No fix listed |
| cisco firesight system software | = 5.3.0.4 | No fix listed |
| cisco firesight system software | = 5.3.0.5 | No fix listed |
| cisco firesight system software | = 5.3.0.6 | No fix listed |
| cisco firesight system software | = 5.3.0.7 | No fix listed |
| cisco firesight system software | = 5.3.1 | No fix listed |
| cisco firesight system software | = 5.3.1.1 | No fix listed |
| cisco firesight system software | = 5.3.1.2 | No fix listed |
| cisco firesight system software | = 5.3.1.3 | No fix listed |
| cisco firesight system software | = 5.3.1.4 | No fix listed |
| cisco firesight system software | = 5.3.1.5 | No fix listed |
| cisco firesight system software | = 5.3.1.7 | No fix listed |
| cisco firesight system software | = 5.4.0 | No fix listed |
| cisco firesight system software | = 5.4.0.1 | No fix listed |
| cisco firesight system software | = 5.4.0.2 | No fix listed |
| cisco firesight system software | = 5.4.0.3 | No fix listed |
| cisco firesight system software | = 5.4.0.4 | No fix listed |
| cisco firesight system software | = 5.4.0.5 | No fix listed |
| cisco firesight system software | = 5.4.0.6 | No fix listed |
| cisco firesight system software | = 5.4.1 | No fix listed |
| cisco firesight system software | = 5.4.1.2 | No fix listed |
| cisco firesight system software | = 5.4.1.3 | No fix listed |
| cisco firesight system software | = 5.4.1.4 | No fix listed |
| cisco firesight system software | = 6.0.0 | No fix listed |
| cisco firesight system software | = 6.0.0.1 | No fix listed |
| cisco firesight system software | = 6.0.1 | No fix listed |
| cisco firesight system software | = 6.1.0 | No fix listed |
References
- 20160928 Cisco Firepower Management Center and FireSIGHT System Software Cross-Site Request Forgery Vulnerability vendor-advisory
- 93199 vdb-entry
- 1036918 vdb-entry