← CVE Radar
CVE-2016-6367Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.
7.8 HIGHEPSS 22.58%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1CISA-ADP | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2016-6367
- Status
- Published
- Assigner (CNA)
- cisco
- Published
- Aug 18, 2016
- Last modified
- 2026-01-12 20:49 UTC
- Weaknesses
Affected Products
No affected products have been published for this CVE yet.
References
- tools.cisco.com http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-cli
- exploit-db.com https://www.exploit-db.com/exploits/40271/
- blogs.cisco.com http://blogs.cisco.com/security/shadow-brokers
- securitytracker.com http://www.securitytracker.com/id/1036636
- tools.cisco.com http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516
- securityfocus.com http://www.securityfocus.com/bid/92520
- github.com https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40271.zip
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS