CVE-2006-6477: Mandiant First Response

Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days.

FRAgent.exe in Mandiant First Response (MFR) before 1.1.1, when run in daemon mode and configured to use only HTTP, allows local users to modify requests and responses between a client and an agent by hijacking an HTTP FRAgent daemon and conducting a man-in-the-middle (MITM) attack.

Affected products

• Mandiant First Response: up to and including 1.1

Published 2006-12-20. Last modified 2026-06-16.