{"id":"CVE-2016-1345","aliases":["EUVD-2016-2444","GHSA-xmgp-gw66-397h"],"status":"published","title":"Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through...","description":"Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bug ID CSCux22726.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-06","score":0.01399,"percentile":0.72594,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2016-04-01T00:00:00Z","modified":"2026-06-17T00:41:45Z","products":[{"vendor":"cisco","product":"asa_with_firepower_services"},{"vendor":"cisco","product":"firesight_system_software"}],"references":[{"url":"http://www.securitytracker.com/id/1035437","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160330-fp","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1035439","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securitytracker.com/id/1035438","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1345"},{"url":"https://github.com/advisories/GHSA-xmgp-gw66-397h"}],"sources":{"cve":[{"id":"CVE-2016-1345","description":"Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bug ID CSCux22726.","status":"published","published":"2016-04-01T00:00:00Z","modified":"2024-08-05T22:55:14.598Z","updated_at":"2026-11-02T14:33:35.841056Z"}],"euvd":[{"id":"EUVD-2016-2444","description":"Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bug ID CSCux22726.","status":"published","published":"2016-04-01T00:00:00Z","modified":"2024-08-05T22:55:14Z","updated_at":"2026-11-03T02:22:57.428811Z"}],"ghsa":[{"id":"GHSA-xmgp-gw66-397h","title":"Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through...","description":"Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bug ID CSCux22726.","status":"published","published":"2022-05-17T03:32:07Z","modified":"2023-01-27T05:08:31Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:43:18.355701Z"}],"nvd":[{"id":"CVE-2016-1345","description":"Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA with FirePOWER Services 5.4.0 through 6.0.0.1 allow remote attackers to bypass malware protection via crafted fields in HTTP headers, aka Bug ID CSCux22726.","status":"published","published":"2016-04-01T00:59:00.113Z","modified":"2026-06-17T00:41:45.187Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:22.479119Z"}]}}