CVE-2016-1457: cisco secure_firewall_management_center
Vulnerability summary
CVE-2016-1457 is a high (CVSS 9.0) vulnerability in cisco secure_firewall_management_center. EPSS estimates a 3.68% chance of exploitation in the next 30 days, higher than 89.5% of scored vulnerabilities.
Timeline
- 18-08-2016PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 allows remote authenticated users to execute arbitrary commands as root via crafted HTTP requests, aka Bug ID CSCur25513.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.68%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.68% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco1 product
- secure_firewall_management_center4.10.3.9 | 5.2.0 | 5.3.0.4 | 5.3.1 | 5.4.0
1 vendor · 1 product
References
3 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-fmcVendor AdvisoryX Refsource CISCO