CVE-2016-6449

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-12-14 · updated 2026-06-17
Weakness: CWE-264

Description

A vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP Connector Endpoint software could allow an authenticated, local attacker to stop certain protected FireAMP processes without requiring a password. Stopping certain critical processes could cause a denial of service (DoS) condition, and certain security features could no longer be available. More Information: CSCvb40597. Known Affected Releases: 1.

Affected products

Cisco FireAMP Connector Endpoint software: 4.4.0, 4.4.2.10200

References

http://www.securityfocus.com/bid/94814
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-fireamp
http://www.securityfocus.com/bid/94814
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-fireamp

Get alerted when CVE-2016-6449 or the next vulnerability affects your stack