Cisco Firepower Management Center and FireSIGHT System Software Malware Bypass Vulnerability

A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. The vulnerability is due to improper input...

PT-2016-4682

Name of the Vulnerable Software and Affected Versions Juniper Junos OS versions prior to 12.1X46-D50 on SRX Series devices Description The issue allows local users to gain privileges by leveraging the use of the request system software command with the partition option after a failed upgrade to...

Cisco FireSIGHT System Software Snort Rule Bypass Vulnerability

A vulnerability in Snort rule detection in Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass configured rules that use Snort detection. The vulnerability is due to improper handling of HTTP header parameters. An attacker could exploit this vulnerability by...

Design/Logic Flaw

Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug ID CSCuz20737...

CVE-2016-1463

CVE-2016-1463 affects Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1. The root cause is improper handling of HTTP header parameters, enabling a remote, unauthenticated attacker to bypass Snort-based rules in the device. Affected component/behavior: Snort rule detection proces...

PT-2016-4811

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 5.3.0 through 6.0.1 Description The issue allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet. Recommendations For versions 5.3.0 through 6.0.1, consider...

CVE-2016-1463: Improper Input Validation

Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug ID CSCuz20737...

Cisco FireSIGHT System Software Snort Rule Bypass Vulnerability

Cisco FireSIGHT System Software is the United States Cisco Cisco company's set of management center software, which supports the centralized management of the use of FirePOWER Services Cisco ASA and Cisco FirePOWER network security appliances network security and operational functions of the...

CVE-2016-1394

Cisco Firepower System Software versions 6.0.0–6.1.0 are affected by a hardcoded/default account that allows unauthenticated, remote CLI login by exploiting knowledge of the password (Bug CSCuz56238). The vulnerability stems from a default static password created during installation, enabling the...

CVE-2016-1394

Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain CLI access by leveraging knowledge of the password, aka Bug ID CSCuz56238...

CVE-2016-1394: Undefined Security Weakness

Cisco Firepower System Software 6.0.0 through 6.1.0 has a hardcoded account, which allows remote attackers to obtain CLI access by leveraging knowledge of the password, aka Bug ID CSCuz56238...

PT-2016-4761

Name of the Vulnerable Software and Affected Versions Cisco Firepower System Software versions 6.0.0 through 6.1.0 Description The issue concerns a hardcoded account in the software, allowing remote attackers to gain CLI access if they have knowledge of the password. Recommendations For versions...

Cisco Firepower System Software Privilege Gain Vulnerability

Cisco Firepower System Software is a next-generation firewall product NGFW from Cisco. A privilege-acquisition vulnerability exists in Cisco Firepower System Software version 6.0 and above, which stems from a default static password included in the program. A remote attacker can use this...

Cisco Application Policy Infrastructure Controller Binary Files Privilege Escalation Vulnerability

A vulnerability in the installation procedure for Cisco Application Policy Infrastructure Controller APIC devices could allow an authenticated, local attacker to gain root-level privileges. The vulnerability is due to the use of incorrect installation and permissions settings for binary files...

CVE-2016-1368

Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection AMP for Networks component on these appliances, allows remote attackers to cause a denial of service packet-processing outage via crafted...

PT-2016-4737

Name of the Vulnerable Software and Affected Versions Cisco FirePOWER System Software versions 5.3.x through 5.3.0.6 Cisco FirePOWER System Software versions 5.4.x through 5.4.0.3 Description The issue allows remote attackers to cause a denial of service, resulting in a packet-processing outage,...

CVE-2016-1368: Undefined Security Weakness

Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection AMP for Networks component on these appliances, allows remote attackers to cause a denial of service packet-processing outage via crafted...

PT-2016-4724

Name of the Vulnerable Software and Affected Versions Cisco FireSIGHT System Software versions 5.4.0 through 6.0.1 ASA with FirePOWER Services versions 5.4.0 through 6.0.0.1 Description The issue allows remote attackers to bypass malware protection. This is achieved via crafted fields in HTTP...

CVE-2016-1345: Improper Input Validation

Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bug ID CSCux22726...

Cisco FireSIGHT System Software Multiple Vulnerabilities

A vulnerability in credential authentication for valid and invalid username-password pairs for Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to determine a list of valid usernames for an affected device. A vulnerability in the HTTP web-based management interface ...