Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Cisco FirePOWER may stop processing traffic from crafted packets

CVE-2016-1368 · published 10 years ago
Summary

The FirePOWER System Software on 7000 and 8000 appliances can be tricked by specially crafted network packets into halting its packet processing. This creates a denial of service where legitimate traffic cannot pass through the device. Apply the latest software update from Cisco to fix the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco firesight_system_software 5.2.0
5.2.0.1
5.2.0.2
5.2.0.3
5.2.0.4
5.2.0.5
5.2.0.6
5.2.0.8
5.3.0
5.3.0.1
5.3.0.2
5.3.0.3
16 more version ranges
cpe:2.3:a:cisco:firesight_system_software:5.2.0:*:*:*:*:*:*:*
Original advisory text
Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection (AMP) for Networks component on these a...
Cisco FirePOWER System Software 5.3.x through 5.3.0.6 and 5.4.x through 5.4.0.3 on FirePOWER 7000 and 8000 appliances, and on the Advanced Malware Protection (AMP) for Networks component on these appliances, allows remote attackers to cause a denial of service (packet-processing outage) via crafted packets, aka Bug ID CSCuu86214.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published5 May 2016
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-1368 · NVD
Track software like this
Free during beta