CVE-2016-6419

Cisco Firepower Management Center version 6.0.1 has hardcoded database credentials, allowing local users to obtain sensitive information via CLI access.

The Threat Management Console in Cisco Firepower Management Center versions 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters.

A vulnerability in the processing of SSH connections of Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS). This is due to improper error handling when an SSH session fails. An attacker could exploit this by sending a high rate of crafted SSH connections, leading to resource exhaustion and reboot.

Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an attacker to execute a cross-site scripting (XSS) attack or an open redirect attack. For more details, see the Details section of the Cisco advisory.

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perform a directory traversal attack. The attacker would require valid device credentials. The issue is due to insufficient input validation of the HTTPS URL.

A vulnerability in the sftunnel functionality of Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to obtain the device registration hash. This is due to insufficient sftunnel negotiation protection during initial device registration. An attacker in a man-in-the-middle position could intercept and modify sftunnel communication between FMC and FTD, potentially altering configuration or alert data.