CVE-2016-1458: Critical severity cisco secure firewall management center vulnerability
The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 allows remote authenticated users to increase user-account privileges via crafted HTTP requests, aka Bug ID CSCur25483.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1458?
CVE-2016-1458 has a medium severity rating, indicating potential security risks to affected Cisco products.
How do I fix CVE-2016-1458?
To fix CVE-2016-1458, upgrade affected Cisco Firepower Management Center and Cisco ASA Software to the recommended versions specified in Cisco's security advisory.
Which Cisco products are affected by CVE-2016-1458?
CVE-2016-1458 affects Cisco Firepower Management Center and Adaptive Security Appliance (ASA) Software versions prior to certain releases.
What types of vulnerabilities does CVE-2016-1458 represent?
CVE-2016-1458 represents vulnerabilities related to improper input validation in the web-based GUI of Cisco security products.
Are there any workarounds for CVE-2016-1458?
No specific workarounds are documented for CVE-2016-1458; the only recommended action is to upgrade the software.