Home

CVE-2016-6434

Description

Cisco Firepower Management Center 6.0.1 has hardcoded database credentials, which allows local users to obtain sensitive information by leveraging CLI access, aka Bug ID CSCva30370.

Risk Information

Base Score
7.8
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.385

Associated Vulnerability

VulnerabilityOS Platform
Cisco Firepower Management Center Console Authentication Bypass Vulnerability For Cisco Firepower Management Center Virtual ApplianceNCM
Improper Authentication Vulnerability (CVE-2016-6434)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1705938Security Update for Cisco Firepower Management Center Virtual Appliance 6.1.0.1

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234