High severity · published Apr 1, 2016
CVE-2016-1345
Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in…
7.5
CVSS
1.4%
EPSS
No
On KEV
Description
Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bug ID CSCux22726.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AW
Asa With Firepower Services · Cisco
5.4.0; 5.4.0.1; 5.4.0.2; 5.4.0.3; 5.4.0.4; 5.4.0.5; +3 more · source: NVD
FS
Firesight System Software · Cisco
5.4.0; 5.4.0.1; 5.4.0.2; 5.4.0.3; 5.4.0.4; 5.4.0.5; +8 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-1345
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-1345
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160330-fp
www.securitytracker.com
http://www.securitytracker.com/id/1035437
www.securitytracker.com
http://www.securitytracker.com/id/1035438
www.securitytracker.com
http://www.securitytracker.com/id/1035439
More from Asa With Firepower Services
7.5
CVE-2016-1369
The Adaptive Security Appliance (ASA) 5585-X FirePOWER Security Services Processor (SSP) module for Cisco ASA with FirePOWER Services 5.3.1 through 6.0.0 misconfigures kernel…
–
CVE-2015-0678
The virtualization layer in Cisco ASA FirePOWER Software before 5.3.1.2 and 5.4.x before 5.4.0.1 and ASA Context-Aware (CX) Software before 9.3.2.1-9 allows remote attackers to…