CVE-2016-6411

—

CVSS 3.0

7.5 high

EPSS

<1%p53

Published

Sep 24, 2016 (Sep 24, 2016)

Modified

Jun 17, 2026

Description

Cisco Firepower Management Center and FireSIGHT System Software 6.0.1 mishandle comparisons between URLs and X.509 certificates, which allows remote attackers to bypass intended do-not-decrypt settings via a crafted URL, aka Bug ID CSCva50585.

Vendors: cisco
Products: firesight system software
Weakness: CWE-20
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.