cisco firepower management center 5.3.1.4 vulnerabilities and exploits

(subscribe to this query)

The Threat Management Console in Cisco Firepower Management Center 5.2.0 up to and including 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872.

Cisco Firepower Management Center 5.2.0 Cisco Firepower Management Center 5.3.0 Cisco Firepower Management Center 5.3.0.2 Cisco Firepower Management Center 5.3.0.3 Cisco Firepower Management Center 5.3.0.4 Cisco Firepower Management Center 5.3.1 Cisco Firepower Management Center 5.3.1.3 Cisco Firepower Management Center 5.3.1.4 Cisco Firepower Management Center 5.3.1.5 Cisco Firepower Management Center 5.3.1.6 Cisco Firepower Management Center 5.4.0 Cisco Firepower Management Center 5.4.0.2 Cisco Firepower Management Center 5.4.1 Cisco Firepower Management Center 5.4.1.1 Cisco Firepower Management Center 5.4.1.2 Cisco Firepower Management Center 5.4.1.3 Cisco Firepower Management Center 5.4.1.4 Cisco Firepower Management Center 5.4.1.5 Cisco Firepower Management Center 5.4.1.6 Cisco Firepower Management Center 6.0.1

2 EDB exploits

A vulnerability in the detection engine reassembly of HTTP packets for Cisco Firepower System Software prior to 6.0.1 could allow an unauthenticated, remote malicious user to cause a denial of service (DoS) condition due to the Snort process unexpectedly restarting. The vulnerabi...

Cisco Firepower Management Center 5.4.1.5 Cisco Firepower Management Center 5.3.1.3 Cisco Firepower Management Center 5.3.1.4 Cisco Firepower Management Center 5.3.0.2 Cisco Firepower Management Center 5.3.0.4 Cisco Firepower Management Center 5.4.1.1 Cisco Firepower Management Center 5.4.0.2 Cisco Firepower Management Center 5.3.0 Cisco Firepower Management Center 5.4.1.6 Cisco Firepower Management Center 5.3.1.5 Cisco Firepower Management Center 5.4.1.2 Cisco Firepower Management Center 5.4 Base Cisco Firepower Management Center 5.4.1.4 Cisco Firepower Management Center 5.3.1 Cisco Firepower Management Center 5.3.0.3 Cisco Firepower Management Center 5.3.1.6 Cisco Firepower Management Center 6.0.0 Cisco Firepower Management Center 6.0.0.1 Cisco Firepower Management Center 6.0.0.0 Cisco Firepower Management Center 5.4.1.3 Cisco Firepower Management Center 5.4.1 Cisco Firepower Management Center 6.0.1

The device login page in Cisco FirePOWER Management Center 5.3 up to and including 6.0.0.1 allows remote malicious users to obtain potentially sensitive software-version information by reading help files, aka Bug ID CSCuy36654.

Cisco Firepower Management Center 5.4.1.4 Cisco Firepower Management Center 5.4.1.1 Cisco Firepower Management Center 6.0.0.1 Cisco Firepower Management Center 5.3.1.3 Cisco Firepower Management Center 5.4 Base Cisco Firepower Management Center 5.4.1.3 Cisco Firepower Management Center 5.3.1.5 Cisco Firepower Management Center 5.3.1.6 Cisco Firepower Management Center 5.3 Base Cisco Firepower Management Center 5.4.1 Cisco Firepower Management Center 5.4.0 Cisco Firepower Management Center 6.0 Base Cisco Firepower Management Center 6.0.0 Cisco Firepower Management Center 5.4.1.5 Cisco Firepower Management Center 5.4.1.2 Cisco Firepower Management Center 5.3.0.3 Cisco Firepower Management Center 5.3.1.4

Session fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System Software up to and including 6.1.0 allows remote malicious users to hijack web sessions via a session identifier, aka Bug ID CSCuz80503.

Cisco Firesight System Software 5.2.0.3 Cisco Firesight System Software 5.2.0.4 Cisco Firesight System Software 5.3.1.1 Cisco Firesight System Software 6.0.0 Cisco Firesight System Software 5.3.1.4 Cisco Firesight System Software 5.4.0.1 Cisco Firesight System Software 5.3.0.3 Cisco Firesight System Software 5.3.0.4 Cisco Firesight System Software 5.4.0.6 Cisco Firesight System Software 5.2.0 Cisco Firesight System Software 5.3.0 Cisco Firesight System Software 5.3.0.1 Cisco Firesight System Software 5.3.0.2 Cisco Firesight System Software 5.3.1 Cisco Firesight System Software 5.4.1.2 Cisco Firesight System Software 5.4.1.3 Cisco Firesight System Software 5.4.1.4 Cisco Firesight System Software 6.0.0.1 Cisco Firesight System Software 5.3.0.7 Cisco Firesight System Software 5.4.0.2 Cisco Firesight System Software 5.2.0.1 Cisco Firesight System Software 5.2.0.2

Cisco Firepower Management Center prior to 6.1 and FireSIGHT System Software prior to 6.1, when certain malware blocking options are enabled, allow remote malicious users to bypass malware detection via crafted fields in HTTP headers, aka Bug ID CSCuz44482.

Cisco Firesight System Software 5.3.0 Cisco Firesight System Software 5.1.0.1 Cisco Firesight System Software 5.1.1.5 Cisco Firesight System Software 5.1.1.6 Cisco Firesight System Software 5.2.0.3 Cisco Firesight System Software 5.2.0.4 Cisco Firesight System Software 5.1.1 Cisco Firesight System Software 5.1.1.1 Cisco Firesight System Software 5.1.1.2 Cisco Firesight System Software 5.1.1.10 Cisco Firesight System Software 5.1.1.11 Cisco Firesight System Software 5.3.0.1 Cisco Firesight System Software 5.3.0.2 Cisco Firesight System Software 5.4.1.2 Cisco Firesight System Software 5.3.1.5 Cisco Firesight System Software 5.4.1.4 Cisco Firesight System Software 6.0.0.1 Cisco Firesight System Software 5.4.0.2 Cisco Firesight System Software 5.4.0.3 Cisco Firesight System Software 5.3.1.1 Cisco Firesight System Software 6.0.0 Cisco Firesight System Software 5.4.0.1

Cross-site scripting (XSS) vulnerability in the web-based management interface in Cisco Firepower Management Center prior to 6.1 and FireSIGHT System Software prior to 6.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz...

Cisco Firesight System Software 5.4.0.6 Cisco Firesight System Software 5.3.0.4 Cisco Firesight System Software 5.3.0.3 Cisco Firesight System Software 5.3.1.4 Cisco Firesight System Software 5.2.0.8 Cisco Firesight System Software 5.3.1.1 Cisco Firesight System Software 5.4.1 Cisco Firesight System Software 5.2.0.3 Cisco Firesight System Software 5.2.0.2 Cisco Firesight System Software 5.2.0.1 Cisco Firesight System Software 5.1.1.4 Cisco Firesight System Software 5.1.1.3 Cisco Firesight System Software 5.3.0 Cisco Firesight System Software 5.2.0 Cisco Firesight System Software 5.4.0.2 Cisco Firesight System Software 5.3.0.7 Cisco Firesight System Software 5.4.1.3 Cisco Firesight System Software 5.4.0.4 Cisco Firesight System Software 5.3.1 Cisco Firesight System Software 5.3.1.3 Cisco Firesight System Software 5.3.0.1 Cisco Firesight System Software 5.2.0.6

Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 up to and including 6.1.0 and Firepower Management Center allows remote malicious users to hijack the authentication of arbitrary users, aka Bug ID CSCva21636.

Cisco Firesight System Software 4.10.2 Cisco Firesight System Software 5.1.0 Cisco Firesight System Software 4.10.2.4 Cisco Firesight System Software 4.10.2.5 Cisco Firesight System Software 4.10.3.7 Cisco Firesight System Software 4.10.3.8 Cisco Firesight System Software 5.1.1.2 Cisco Firesight System Software 5.1.1.3 Cisco Firesight System Software 5.1.1.11 Cisco Firesight System Software 5.2.0.1 Cisco Firesight System Software 5.3.0.2 Cisco Firesight System Software 5.4.0 Cisco Firesight System Software 5.4.1 Cisco Firesight System Software 5.3.1.5 Cisco Firesight System Software 5.2.0.8 Cisco Firesight System Software 6.0.0.1 Cisco Firesight System Software 6.0.1 Cisco Firesight System Software 5.4.0.3 Cisco Firesight System Software 5.4.0.5 Cisco Firesight System Software 4.10.2.2 Cisco Firesight System Software 4.10.2.3 Cisco Firesight System Software 4.10.3.5

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook