Cisco Firepower URL Bypass Vulnerability

A vulnerability in Cisco Firepower System Software could allow an unauthenticated, remote attacker to maliciously bypass the appliance SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2016-2783: Undefined Security Weakness

Avaya Fabric Connect Virtual Services Platform VSP Operating System Software VOSS before 4.2.3.0 and 5.x before 5.0.1.0 does not properly handle VLAN and I-SIS indexes, which allows remote attackers to obtain unauthorized access via crafted Ethernet frames...

PT-2017-3056

Name of the Vulnerable Software and Affected Versions Avaya Fabric Connect Virtual Services Platform VSP Operating System Software VOSS versions prior to 4.2.3.0 Avaya Fabric Connect Virtual Services Platform VSP Operating System Software VOSS versions 5.x prior to 5.0.1.0 Description The issue i...

Design/Logic Flaw

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. More Information: CSCvb19366. Known Affected Releases: 5.4.1.6...

CVE-2016-9193

CVE-2016-9193 affects Cisco Firepower Management Center and FireSIGHT System Software when using a file policy with Block Malware. The root cause is described as incorrect handling of duplicate downloads of malware files, enabling an unauthenticated, remote attacker to bypass malware detection/bl...

CVE-2016-9193

A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. Affected Products: Cisco Firepower Managemen...

CVE-2016-9193: Improper Input Validation

A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. Affected Products: Cisco Firepower Managemen...

CVE-2016-9209: Undefined Security Weakness

A vulnerability in TCP processing in Cisco FirePOWER system software could allow an unauthenticated, remote attacker to download files that would normally be blocked. Affected Products: The following Cisco products are vulnerable: Adaptive Security Appliance ASA 5500-X Series with FirePOWER...

Cisco Firepower Management Center Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Firepower Management Center running FireSIGHT System software could allow an authenticated, remote attacker to view the Remote Storage Password. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from ...

Cisco Firepower Management Center and Cisco FireSIGHT System Software Malicious Software Detection Bypass Vulnerability

A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. The vulnerability is due to the incorrect...

Design/Logic Flaw

A vulnerability in the FTP Representational State Transfer Application Programming Interface REST API for Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass FTP malware detection rules and download malware over an FTP connection. Cisco Firepower System...

CVE-2016-6460

A vulnerability in the FTP Representational State Transfer Application Programming Interface REST API for Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass FTP malware detection rules and download malware over an FTP connection. Cisco Firepower System...

PT-2016-6932

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions 5.4.0.2 through 6.2.0 Description A vulnerability in the FTP Representational State Transfer Application Programming Interface REST API could allow an unauthenticated, remote attacker to bypass FTP...

CVE-2016-6460: Undefined Security Weakness

A vulnerability in the FTP Representational State Transfer Application Programming Interface REST API for Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass FTP malware detection rules and download malware over an FTP connection. Cisco Firepower System...

Cisco Firepower System Software Security Bypass Vulnerability (CNVD-2016-11329)

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A security bypass vulnerability exists in Cisco Firepower System Software, which can be exploited by attackers to bypass security restrictions and perform unauthorized operations...

CVE-2016-6439

A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the Snort process unexpectedly restarting. The vulnerability is due to improper...

CVE-2016-6439

A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the Snort process unexpectedly restarting. The vulnerability is due to improper...

CVE-2016-6439

CVE-2016-6439 affects Cisco Firepower System Software prior to 6.0.1. The denial-of-service arises in the detection engine’s HTTP packet stream reassembly, where an unauthenticated remote attacker can send crafted HTTP streams to trigger the Snort process to restart. If the Snort process restarts...

CVE-2016-6439: Undefined Security Weakness

A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software before 6.0.1 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to the Snort process unexpectedly restarting. The vulnerability is due to improper...

CVE-2016-6417: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Cisco FireSIGHT System Software 4.10.2 through 6.1.0 and Firepower Management Center allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCva21636...