CVE-2016-9209: Undefined Security Weakness

A vulnerability in TCP processing in Cisco FirePOWER system software could allow an unauthenticated, remote attacker to download files that would normally be blocked. Affected Products: The following Cisco products are vulnerable: Adaptive Security Appliance ASA 5500-X Series with FirePOWER...

PT-2016-6943

Name of the Vulnerable Software and Affected Versions Cisco Firepower Management Center running FireSIGHT System software version 5.4.1.6 Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to view the Remote Storage Password...

PT-2016-7705

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA 5500-X Series with FirePOWER Services version 2.9.7.10 Cisco Advanced Malware Protection AMP for Networks - 7000 Series Appliances version 2.9.7.10 Cisco Advanced Malware Protection AMP for Networks - 8000...

Cisco Firepower Management Center Information Disclosure Vulnerability (CNVD-2016-12547)

Cisco Firepower is a family of advanced firewalls. A security vulnerability in the WEB-based management interface of Cisco Firepower Management Center allows a remote attacker to view remotely stored passwords...

Cisco FirePOWER Malware Security Bypass Vulnerability

Cisco FirePOWER is a next-generation firewall developed by Cisco. A security bypass vulnerability exists in the Cisco FirePOWER Malware TCP processing, which allows remote attackers to exploit the vulnerability to bypass security restrictions and download files...

Cisco Firepower Management Center Malicious Software Detection Bypass Vulnerability

A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be...

Cisco Firepower Management Center Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from ...

Cisco Firepower Management Center Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. The vulnerability is due to improper masking of sensitive data in the HTTP response. An...

Cisco FirePOWER Malware Protection Bypass Vulnerability

A vulnerability in TCP processing in Cisco FirePOWER system software could allow an unauthenticated, remote attacker to download files that would normally be blocked. The vulnerability is due to out-of-order TCP segments retransmissions out of the current window, which have already been...

Cisco Firepower Management Center and Cisco FireSIGHT System Software Malicious Software Detection Bypass Vulnerability

A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. The vulnerability is due to the incorrect...

CVE-2016-6460

A vulnerability in the FTP Representational State Transfer Application Programming Interface REST API for Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass FTP malware detection rules and download malware over an FTP connection. Cisco Firepower System...

Design/Logic Flaw

A vulnerability in the FTP Representational State Transfer Application Programming Interface REST API for Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass FTP malware detection rules and download malware over an FTP connection. Cisco Firepower System...

CVE-2016-6460

A vulnerability in the FTP Representational State Transfer Application Programming Interface REST API for Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass FTP malware detection rules and download malware over an FTP connection. Cisco Firepower System...

CVE-2016-6460

CVE-2016-6460 describes a vulnerability in the FTP REST API of Cisco Firepower System Software where an unauthenticated attacker can bypass FTP malware detection and download malware over FTP when a file policy blocks FTP malware. Affected releases include 5.4.0.2, 5.4.1.1, 5.4.1.6, 6.0.0, 6.1.0,...

CVE-2016-6460: Undefined Security Weakness

A vulnerability in the FTP Representational State Transfer Application Programming Interface REST API for Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass FTP malware detection rules and download malware over an FTP connection. Cisco Firepower System...

PT-2016-6932

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions 5.4.0.2 through 6.2.0 Description A vulnerability in the FTP Representational State Transfer Application Programming Interface REST API could allow an unauthenticated, remote attacker to bypass FTP...

Cisco Firepower System Software Security Bypass Vulnerability (CNVD-2016-11329)

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A security bypass vulnerability exists in Cisco Firepower System Software, which can be exploited by attackers to bypass security restrictions and perform unauthorized operations...

Cisco Firepower System Software FTP Malware Vulnerability

A vulnerability in the FTP Representational State Transfer Application Programming Interface REST API for Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass FTP malware detection rules and download malware over an FTP connection. SPDX-FileCopyrightText: 2016...

Cisco Firepower System Software FTP Malware Vulnerability

A vulnerability in the FTP Representational State Transfer Application Programming Interface REST API for Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass FTP malware detection rules and download malware over an FTP connection. The vulnerability is due to ...

Cisco Firepower Packet Inspection Engine HTTP Stream DoS

The version of Cisco Firepower System running on the remote host is affected by a denial of service vulnerability in the packet inspection engine due to improper handling of certain HTTP packet streams. An unauthenticated, remote attacker can exploit this, via a specially crafted HTTP packet...