CVE-2016-6460: cisco firesight_system_software 7PK - Security Features

Vulnerability summary

CVE-2016-6460 is a high (CVSS 7.5) 7PK - Security Features vulnerability in cisco firesight_system_software. EPSS estimates a 1.55% chance of exploitation in the next 30 days, higher than 74.7% of scored vulnerabilities.

Timeline

1. 19-11-2016
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in the FTP Representational State Transfer Application Programming Interface (REST API) for Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass FTP malware detection rules and download malware over an FTP connection. Cisco Firepower System Software is affected when the device has a file policy with malware block configured for FTP connections. More Information: CSCuv36188 CSCuy91156. Known Affected Releases: 5.4.0.2 5.4.1.1 5.4.1.6 6.0.0 6.1.0 6.2.0. Known Fixed Releases: 6.0.0.

• CWE-2547PK - Security FeaturesSoftware security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.