CVE-2016-1463

Description

Cisco FireSIGHT System Software 5.3.0, 5.3.1, 5.4.0, 6.0, and 6.0.1 allows remote attackers to bypass Snort rules via crafted parameters in the header of an HTTP packet, aka Bug ID CSCuz20737.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS Score
Exploitation Probability
0.433

Associated Vulnerability

VulnerabilityOS Platform
Cisco FireSIGHT System Software Snort Rule Bypass Vulnerability For Cisco Firepower Management Center Virtual ApplianceNCM
Improper Input Validation Vulnerability (CVE-2016-1463)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1705938Security Update for Cisco Firepower Management Center Virtual Appliance 6.1.0.1

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234