6.8
CVSSv2

CVE-2016-6417

Published: 05/10/2016 Updated: 30/07/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in Cisco FireSIGHT System Software 4.10.2 up to and including 6.1.0 and Firepower Management Center allows remote malicious users to hijack the authentication of arbitrary users, aka Bug ID CSCva21636.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco firesight system software 4.10.2

cisco firesight system software 5.1.0

cisco firesight system software 4.10.2.4

cisco firesight system software 4.10.2.5

cisco firesight system software 4.10.3.7

cisco firesight system software 4.10.3.8

cisco firesight system software 5.1.1.2

cisco firesight system software 5.1.1.3

cisco firesight system software 5.1.1.11

cisco firesight system software 5.2.0.1

cisco firesight system software 5.3.0.2

cisco firesight system software 5.4.0

cisco firesight system software 5.4.1

cisco firesight system software 5.3.1.5

cisco firesight system software 5.2.0.8

cisco firesight system software 6.0.0.1

cisco firesight system software 6.0.1

cisco firesight system software 5.4.0.3

cisco firesight system software 5.4.0.5

cisco firesight system software 4.10.2.2

cisco firesight system software 4.10.2.3

cisco firesight system software 4.10.3.5

cisco firesight system software 4.10.3.6

cisco firesight system software 5.1.1

cisco firesight system software 5.1.1.1

cisco firesight system software 5.1.1.9

cisco firesight system software 5.1.1.10

cisco firesight system software 5.2.0.6

cisco firesight system software 5.3.0.1

cisco firesight system software 5.3.1

cisco firesight system software 5.4.1.2

cisco firesight system software 5.4.1.3

cisco firesight system software 5.4.1.4

cisco firesight system software 5.3.0.6

cisco firesight system software 5.3.0.7

cisco firesight system software 5.4.0.2

cisco firesight system software 5.2.0

cisco firesight system software 5.3.0

cisco firesight system software 4.10.3.1

cisco firesight system software 4.10.3.2

cisco firesight system software 4.10.3.9

cisco firesight system software 4.10.3.10

cisco firesight system software 5.1.0.1

cisco firesight system software 5.1.1.4

cisco firesight system software 5.1.1.5

cisco firesight system software 5.2.0.2

cisco firesight system software 5.2.0.3

cisco firesight system software 5.3.1.1

cisco firesight system software 6.0.0

cisco firesight system software 5.3.1.4

cisco firesight system software 5.4.0.1

cisco firesight system software 6.1.0

cisco firesight system software 5.3.0.3

cisco firesight system software 5.4.0.6

cisco firesight system software 4.10.3

cisco firesight system software 4.10.2.1

cisco firesight system software 4.10.3.3

cisco firesight system software 4.10.3.4

cisco firesight system software 5.1.0.2

cisco firesight system software 5.1.0.3

cisco firesight system software 5.1.1.6

cisco firesight system software 5.1.1.8

cisco firesight system software 5.2.0.4

cisco firesight system software 5.2.0.5

cisco firesight system software 5.3.1.2

cisco firesight system software 5.3.1.3

cisco firesight system software 5.3.1.7

cisco firesight system software 5.4.0.4

cisco firesight system software 5.3.0.4

cisco firesight system software 5.3.0.5

Vendor Advisories

A cross-site request forgery (CSRF) vulnerability for Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to execute unwanted actions The vulnerability is due to a lack of CSRF protections by an affected device An attacker could exploit this vulnerability by convincing a user to f ...