CVE-2016-6396

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.

Weaknesses (CWE)

CWE-20

Affected Products (52)

cisco · firesight_system_softwarevulnerable

References (6)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsss1

Vendor Advisory

http://www.securityfocus.com/bid/92826

http://www.securitytracker.com/id/1036756

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160907-fsss1

Vendor Advisory

http://www.securityfocus.com/bid/92826

http://www.securitytracker.com/id/1036756