CVE-2016-1457
First published: Thu Aug 18 2016(Updated: )
The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 allows remote authenticated users to execute arbitrary commands as root via crafted HTTP requests, aka Bug ID CSCur25513.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Firepower Management Center | =4.10.3.9 | |
| Cisco Firepower Management Center | =5.2.0 | |
| Cisco Firepower Management Center | =5.3.0.4 | |
| Cisco Firepower Management Center | =5.3.1 | |
| Cisco Firepower Management Center | =5.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/author
- agent/weakness
- agent/references
- agent/severity
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco firepower management center
- version/cisco firepower management center/4.10.3.9
- version/cisco firepower management center/5.2.0
- version/cisco firepower management center/5.3.0.4
- version/cisco firepower management center/5.3.1
- version/cisco firepower management center/5.4.0