CVE-2016-6396

EUVD-2016-7319
Cisco Firepower Management Center before 6.1 and FireSIGHT System Software before 6.1, when certain malware blocking options are enabled, allow remote attackers to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 62%
Affected Products (NVD)
VendorProductVersion
ciscofiresight_system_software
5.1.0
ciscofiresight_system_software
5.1.0.1
ciscofiresight_system_software
5.1.0.2
ciscofiresight_system_software
5.1.0.3
ciscofiresight_system_software
5.1.1
ciscofiresight_system_software
5.1.1.1
ciscofiresight_system_software
5.1.1.2
ciscofiresight_system_software
5.1.1.3
ciscofiresight_system_software
5.1.1.4
ciscofiresight_system_software
5.1.1.5
ciscofiresight_system_software
5.1.1.6
ciscofiresight_system_software
5.1.1.8
ciscofiresight_system_software
5.1.1.9
ciscofiresight_system_software
5.1.1.10
ciscofiresight_system_software
5.1.1.11
ciscofiresight_system_software
5.2.0
ciscofiresight_system_software
5.2.0.1
ciscofiresight_system_software
5.2.0.2
ciscofiresight_system_software
5.2.0.3
ciscofiresight_system_software
5.2.0.4
ciscofiresight_system_software
5.2.0.5
ciscofiresight_system_software
5.2.0.6
ciscofiresight_system_software
5.2.0.8
ciscofiresight_system_software
5.3.0
ciscofiresight_system_software
5.3.0.1
ciscofiresight_system_software
5.3.0.2
ciscofiresight_system_software
5.3.0.3
ciscofiresight_system_software
5.3.0.4
ciscofiresight_system_software
5.3.0.5
ciscofiresight_system_software
5.3.0.6
ciscofiresight_system_software
5.3.0.7
ciscofiresight_system_software
5.3.1
ciscofiresight_system_software
5.3.1.1
ciscofiresight_system_software
5.3.1.2
ciscofiresight_system_software
5.3.1.3
ciscofiresight_system_software
5.3.1.4
ciscofiresight_system_software
5.3.1.5
ciscofiresight_system_software
5.3.1.7
ciscofiresight_system_software
5.4.0
ciscofiresight_system_software
5.4.0.1
ciscofiresight_system_software
5.4.0.2
ciscofiresight_system_software
5.4.0.3
ciscofiresight_system_software
5.4.0.4
ciscofiresight_system_software
5.4.0.5
ciscofiresight_system_software
5.4.0.6
ciscofiresight_system_software
5.4.1
ciscofiresight_system_software
5.4.1.2
ciscofiresight_system_software
5.4.1.3
ciscofiresight_system_software
5.4.1.4
ciscofiresight_system_software
6.0.0
ciscofiresight_system_software
6.0.0.1
ciscofiresight_system_software
6.0.1
𝑥
= Vulnerable software versions