Malware Bypass Vulnerability in Cisco Firepower Management Center

CVE-2016-6396

What is CVE-2016-6396?

Cisco Firepower Management Center and FireSIGHT System Software prior to version 6.1 are susceptible to a malware bypass vulnerability. This occurs when specific malware blocking options are enabled, enabling remote attackers to circumvent malware detection mechanisms by manipulating certain fields in HTTP headers. Attackers can exploit this flaw to potentially execute unauthorized actions or gain access to sensitive information, highlighting the importance of keeping software up to date and employing rigorous security measures.

References