CVE-2016-1457

The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software…

published August 18, 2016

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 allows remote authenticated users to execute arbitrary commands as root via crafted HTTP requests, aka Bug ID CSCur25513.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03679 · 89.6th percentile
Published
2016-08-18T19:00Z
EPSS history
Timeline
  • 18 AUG 19:00Z
    The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software…
    cvelistv5