5.3

CVE-2016-6396

Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Firesight System Software Version5.1.0
Cisco ≫ Firesight System Software Version5.1.0.1
Cisco ≫ Firesight System Software Version5.1.0.2
Cisco ≫ Firesight System Software Version5.1.0.3
Cisco ≫ Firesight System Software Version5.1.1
Cisco ≫ Firesight System Software Version5.1.1.1
Cisco ≫ Firesight System Software Version5.1.1.2
Cisco ≫ Firesight System Software Version5.1.1.3
Cisco ≫ Firesight System Software Version5.1.1.4
Cisco ≫ Firesight System Software Version5.1.1.5
Cisco ≫ Firesight System Software Version5.1.1.6
Cisco ≫ Firesight System Software Version5.1.1.8
Cisco ≫ Firesight System Software Version5.1.1.9
Cisco ≫ Firesight System Software Version5.1.1.10
Cisco ≫ Firesight System Software Version5.1.1.11
Cisco ≫ Firesight System Software Version5.2.0
Cisco ≫ Firesight System Software Version5.2.0.1
Cisco ≫ Firesight System Software Version5.2.0.2
Cisco ≫ Firesight System Software Version5.2.0.3
Cisco ≫ Firesight System Software Version5.2.0.4
Cisco ≫ Firesight System Software Version5.2.0.5
Cisco ≫ Firesight System Software Version5.2.0.6
Cisco ≫ Firesight System Software Version5.2.0.8
Cisco ≫ Firesight System Software Version5.3.0
Cisco ≫ Firesight System Software Version5.3.0.1
Cisco ≫ Firesight System Software Version5.3.0.2
Cisco ≫ Firesight System Software Version5.3.0.3
Cisco ≫ Firesight System Software Version5.3.0.4
Cisco ≫ Firesight System Software Version5.3.0.5
Cisco ≫ Firesight System Software Version5.3.0.6
Cisco ≫ Firesight System Software Version5.3.0.7
Cisco ≫ Firesight System Software Version5.3.1
Cisco ≫ Firesight System Software Version5.3.1.1
Cisco ≫ Firesight System Software Version5.3.1.2
Cisco ≫ Firesight System Software Version5.3.1.3
Cisco ≫ Firesight System Software Version5.3.1.4
Cisco ≫ Firesight System Software Version5.3.1.5
Cisco ≫ Firesight System Software Version5.3.1.7
Cisco ≫ Firesight System Software Version5.4.0
Cisco ≫ Firesight System Software Version5.4.0.1
Cisco ≫ Firesight System Software Version5.4.0.2
Cisco ≫ Firesight System Software Version5.4.0.3
Cisco ≫ Firesight System Software Version5.4.0.4
Cisco ≫ Firesight System Software Version5.4.0.5
Cisco ≫ Firesight System Software Version5.4.0.6
Cisco ≫ Firesight System Software Version5.4.1
Cisco ≫ Firesight System Software Version5.4.1.2
Cisco ≫ Firesight System Software Version5.4.1.3
Cisco ≫ Firesight System Software Version5.4.1.4
Cisco ≫ Firesight System Software Version6.0.0
Cisco ≫ Firesight System Software Version6.0.0.1
Cisco ≫ Firesight System Software Version6.0.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.43% 0.598
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.