medium6.5Public exploit code
CVE-2016-6435
The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cisco Firepower Threat Management Console 6.0.1 - Local File Inclusion2016-10-05 · webapps · cgi
Impact
The web console in Cisco Firepower Management Center 6.0.1 allows remote authenticated users to read arbitrary files via crafted parameters, aka Bug ID CSCva30376.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Secure Firewall Management Center | Version 6.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ftmc2
- http://www.securityfocus.com/bid/93421
- https://blog.korelogic.com/blog/2016/10/10/virtual_appliance_spelunking
- https://www.exploit-db.com/exploits/40464/
- https://www.korelogic.com/Resources/Advisories/KL-001-2016-006.txt
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-ftmc2
- http://www.securityfocus.com/bid/93421
- https://blog.korelogic.com/blog/2016/10/10/virtual_appliance_spelunking
- https://www.exploit-db.com/exploits/40464/
- https://www.korelogic.com/Resources/Advisories/KL-001-2016-006.txt