CVE-2016-6434

EPSS 0.39%
Veröffentlicht 06.10.2016 10:59:15
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitive information by leveraging CLI access, aka Bug ID CSCva30370.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Secure Firewall Management Center Version6.0.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.39%	0.567

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

https://blog.korelogic.com/blog/2016/10/10/virtual_appliance_spelunking

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ftmc1

Vendor Advisory

http://www.securityfocus.com/bid/93412

https://www.exploit-db.com/exploits/40465/

https://www.korelogic.com/Resources/Advisories/KL-001-2016-005.txt

https://nvd.nist.gov/vuln/detail/CVE-2016-6434

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-6434

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-6434

EUVD