CVE-2016-6433

🗓️ 06 Oct 2016 10:00:00Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 106 Views🌐 WEB

Cisco Firepower Management Center CVE-2016-6433 allows remote authenticated users to execute arbitrary commands

Reporter	Title	Published	Views	Family All 19
zdt	Cisco Firepower Management Console 6.0 Post Authentication UserAdd Exploit	12 Jan 201700:00	–	zdt
Circl	CVE-2016-6433	5 Oct 201600:00	–	circl
Cisco	Cisco Firepower Threat Management Console Remote Command Execution Vulnerability	5 Oct 201616:00	–	cisco
CNVD	Cisco Firepower Management Center Console Local File Inclusion Vulnerability	8 Oct 201600:00	–	cnvd
Cvelist	CVE-2016-6433	6 Oct 201610:00	–	cvelist
Exploit DB	Cisco Firepower Threat Management Console 6.0.1 - Remote Command Execution	5 Oct 201600:00	–	exploitdb
Exploit DB	Cisco Firepower Management Console 6.0 - Post Authentication UserAdd (Metasploit)	13 Jan 201700:00	–	exploitdb
exploitpack	Cisco Firepower Threat Management Console 6.0.1 - Remote Command Execution	5 Oct 201600:00	–	exploitpack
KoreLogic Security	Cisco Firepower Threat Management Console Remote Command Execution Leading to Root Access	5 Oct 201600:00	–	korelogic
Metasploit	Cisco Firepower Management Console 6.0 Post Authentication UserAdd Vulnerability	10 Oct 201600:00	–	metasploit

NVD

Node

OR

cisco secure_firewall_management_centerMatch5.2.0

cisco secure_firewall_management_centerMatch5.3.0

cisco secure_firewall_management_centerMatch5.3.0.2

cisco secure_firewall_management_centerMatch5.3.0.3

cisco secure_firewall_management_centerMatch5.3.0.4

cisco secure_firewall_management_centerMatch5.3.1

cisco secure_firewall_management_centerMatch5.3.1.3

cisco secure_firewall_management_centerMatch5.3.1.4

cisco secure_firewall_management_centerMatch5.3.1.5

cisco secure_firewall_management_centerMatch5.3.1.6

cisco secure_firewall_management_centerMatch5.4.0

cisco secure_firewall_management_centerMatch5.4.0.2

cisco secure_firewall_management_centerMatch5.4.1

cisco secure_firewall_management_centerMatch5.4.1.1

cisco secure_firewall_management_centerMatch5.4.1.2

cisco secure_firewall_management_centerMatch5.4.1.3

cisco secure_firewall_management_centerMatch5.4.1.4

cisco secure_firewall_management_centerMatch5.4.1.5

cisco secure_firewall_management_centerMatch5.4.1.6

cisco secure_firewall_management_centerMatch6.0.1

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/140467/Cisco-Firepower-Management-Console-6.0-Post-Authentication-UserAdd.html
exploit-db	www.exploit-db.com/exploits/41041/
exploit-db	www.exploit-db.com/exploits/40463/
securityfocus	www.securityfocus.com/bid/93414
blog	www.blog.korelogic.com/blog/2016/10/10/virtual_appliance_spelunking
korelogic	www.korelogic.com/Resources/Advisories/KL-001-2016-007.txt
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ftmc

Parameter	Position	Path	Description	CWE
sf_action_id	binary	DetectionPolicy/rules/rulesimport.cgi	Endpoint used to import rules via multipart form data; attacker can upload a crafted file containing a backdoor command sequence to create an SSH backdoor after authentication.	CWE-20
file	binary	DetectionPolicy/rules/rulesimport.cgi	Endpoint used to import rules via multipart form data; attacker can upload a crafted file containing a backdoor command sequence to create an SSH backdoor after authentication.	CWE-20

17 Jun 2026 00:51Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8

CVSS 29

EPSS0.7575

cisco firepower management center cve-2016-6433 remote authenticated arbitrary commands