CVE-2016-6433

🗓️ 06 Oct 2016 10:00:00Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 115 Views🌐 WEB

Cisco Firepower Management Center CVE-2016-6433 allows remote authenticated users to execute arbitrary commands

Reporter	Title	Published	Views	Family All 20
zdt	Cisco Firepower Management Console 6.0 Post Authentication UserAdd Exploit	12 Jan 201700:00	–	zdt
Circl	CVE-2016-6433	5 Oct 201600:00	–	circl
Cisco	Cisco Firepower Threat Management Console Remote Command Execution Vulnerability	5 Oct 201616:00	–	cisco
CNVD	Cisco Firepower Management Center Console Local File Inclusion Vulnerability	8 Oct 201600:00	–	cnvd
Cvelist	CVE-2016-6433	6 Oct 201610:00	–	cvelist
Exploit DB	Cisco Firepower Threat Management Console 6.0.1 - Remote Command Execution	5 Oct 201600:00	–	exploitdb
Exploit DB	Cisco Firepower Management Console 6.0 - Post Authentication UserAdd (Metasploit)	13 Jan 201700:00	–	exploitdb
exploitpack	Cisco Firepower Threat Management Console 6.0.1 - Remote Command Execution	5 Oct 201600:00	–	exploitpack
KoreLogic Security	Cisco Firepower Threat Management Console Remote Command Execution Leading to Root Access	5 Oct 201600:00	–	korelogic
Metasploit	Cisco Firepower Management Console 6.0 Post Authentication UserAdd Vulnerability	10 Oct 201600:00	–	metasploit

NVD

Node

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/140467/Cisco-Firepower-Management-Console-6.0-Post-Authentication-UserAdd.html
exploit-db	www.exploit-db.com/exploits/41041/
exploit-db	www.exploit-db.com/exploits/40463/
securityfocus	www.securityfocus.com/bid/93414
blog	www.blog.korelogic.com/blog/2016/10/10/virtual_appliance_spelunking
korelogic	www.korelogic.com/Resources/Advisories/KL-001-2016-007.txt
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ftmc

Parameter	Position	Path	Description	CWE
username	request body	/login.cgi	Login endpoint used to authenticate before exploitation.	CWE-20
password	request body	/login.cgi	Login endpoint used to authenticate before exploitation.	CWE-20
target	request body	/login.cgi	Login endpoint used to authenticate before exploitation.	CWE-20
action_submit	request body	/DetectionPolicy/rules/rulesimport.cgi	Endpoint used to upload a crafted payload (malicious file) to create a backdoor after login.	CWE-20
source	request body	/DetectionPolicy/rules/rulesimport.cgi	Endpoint used to upload a crafted payload (malicious file) to create a backdoor after login.	CWE-20
manual_update	request body	/DetectionPolicy/rules/rulesimport.cgi	Endpoint used to upload a crafted payload (malicious file) to create a backdoor after login.	CWE-20
sf_action_id	request body	/DetectionPolicy/rules/rulesimport.cgi	Endpoint used to upload a crafted payload (malicious file) to create a backdoor after login.	CWE-20
file	request body	/DetectionPolicy/rules/rulesimport.cgi	Endpoint used to upload a crafted payload (malicious file) to create a backdoor after login.	CWE-20

17 Jun 2026 00:51Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8

CVSS 29

EPSS0.80696