CVE-2016-9193: cisco firesight_system_software Improper Input Validation
Vulnerability summary
CVE-2016-9193 is a high (CVSS 7.5) Improper Input Validation vulnerability in cisco firesight_system_software. EPSS estimates a 1.96% chance of exploitation in the next 30 days, higher than 79.9% of scored vulnerabilities.
Timeline
- 14-12-2016PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass malware detection mechanisms on an affected system. Affected Products: Cisco Firepower Management Center and FireSIGHT System Software are affected when they are configured to use a file policy that has the Block Malware action. More Information: CSCvb27494. Known Affected Releases: 6.0.1.1 6.1.0.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.96%
Chance of exploitation in the next 30 days
Percentile
80%
Versus all other CVEs
30-day change
0.00 pp
From 1.96% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco2 products
- firesight_system_software6.0.0 | 6.0.0.0 | 6.0.0.1 | 6.0.1 | 6.0.1.1 | 6.1.0
- secure_firewall_management_center6.0.0 | 6.0.0.0 | 6.0.0.1 | 6.0.1 | 6.0.1.1 | 6.1.0
1 vendor · 2 products
References
3 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-firepowerX Refsource CONFIRMVendor Advisory