CVE-2016-1457

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-08-18 · updated 2026-06-17
Weakness: CWE-264

Description

The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.1.2 and 5.4.x before 5.4.0.1 allows remote authenticated users to execute arbitrary commands as root via crafted HTTP requests, aka Bug ID CSCur25513.

Affected products

Cisco Firepower Management Center: 4.10.3.9, 5.2.0, 5.3.0.4, 5.3.1, 5.4.0

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-fmc
http://www.securityfocus.com/bid/92509
http://www.securitytracker.com/id/1036642
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-fmc
http://www.securityfocus.com/bid/92509
http://www.securitytracker.com/id/1036642

Get alerted when CVE-2016-1457 or the next vulnerability affects your stack