1. Home
  2. CVE Database
  3. CVE-2016-1345
HIGH · 7.5

CVE-2016-1345

Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bu...

Vulnerability Description

Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bug ID CSCux22726.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
CiscoAsa With Firepower Services5.4.0
CiscoFiresight System Software5.4.0

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2016-1345?

CVE-2016-1345 is a vulnerability with a CVSS score of 7.5 (HIGH). Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bu...

How severe is CVE-2016-1345?

CVE-2016-1345 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-1345?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Asa With Firepower Services, Cisco Firesight System Software.