CVE-2016-6433: Cisco Secure Firewall Management Center

High severity, CVSS 8.8. EPSS: 80.7% chance of exploitation in the next 30 days.

The Threat Management Console in Cisco Firepower Management Center 5.2.0 through 6.0.1 allows remote authenticated users to execute arbitrary commands via crafted web-application parameters, aka Bug ID CSCva30872.

Affected products

• Cisco Secure Firewall Management Center: version 5.2.0 only; version 5.3.0 only; version 5.3.0.2 only; version 5.3.0.3 only; version 5.3.0.4 only; version 5.3.1 only; …

Published 2016-10-06. Last modified 2026-06-17.