FTP API Vulnerability in Cisco Firepower System Software

CVE-2016-6460

Summary

A vulnerability exists in the FTP Representational State Transfer API within Cisco Firepower System Software, which could enable an unauthenticated remote attacker to bypass configured malware detection rules. This flaw is particularly concerning for systems employing file policies to block malware over FTP connections, allowing a potential attacker to download malicious software. Affected versions of Cisco Firepower include 5.4 and 6.x series, emphasizing the need for users to verify their systems are updated to avoid exploitation.

References