CVSS 3.0
3.7 lowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NCVE-2016-1356
Low (3.7) in cisco firesight system software. EPSS 0.8% chance of exploitation in the next 30 days.
Cisco FireSIGHT System Software 6.1.0 does not use a constant-time algorithm for verifying credentials, which makes it easier for remote attackers to enumerate valid usernames by measuring timing differences, aka Bug ID CSCuy41615.
Severity
- EPSS
- 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-255, CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:firesight_system_software