CVE-2016-1458 Privilege escalation in n/a

What is CVE-2016-1458?

CVE-2016-1458 is a high-severity vulnerability in Cisco Secure Firewall Management Center, published on 18 Aug 2016. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

The web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 and Cisco Adaptive Security Appliance (ASA) Software on 5500-X devices with FirePOWER Services 4.x and 5.x before 5.3.0.3, 5.3.1.x before 5.3.1.2, and 5.4.x before 5.4.0.1 allows remote authenticated users to increase user-account privileges via crafted HTTP requests, aka Bug ID CSCur25483.

Weakness: CWE-264

Which versions are affected by CVE-2016-1458?

It affects 1 product.

Products include Cisco Secure Firewall Management Center.

How do I fix CVE-2016-1458?

No fix has been published for CVE-2016-1458 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-1458 being exploited?

There is no known exploitation of CVE-2016-1458 in the wild and no public exploit code.

Other vulnerabilities in Cisco Secure Firewall Management Center

• CVE-2026-20079 Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Exploited Critical 10.0
• CVE-2026-20131 Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Exploited Critical 10.0
• CVE-2026-20316 Cisco Secure Firewall Management Center Use of Hard-coded Password Exploited Medium 5.3
• CVE-2025-20265 Cisco Secure Firewall Management Center Software Radius Remote Code Execution Vulnerability Critical 10.0
• CVE-2024-20424 Command injection in Cisco Firepower Management Center Critical 9.9

All Cisco Secure Firewall Management Center vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-hpv8-jm67-hqfq.