CVE-2016-6367

HIGHCISA KEV

7.8

Description

Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

Details CVE

Score CVSS v3.17.8

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie8/18/2016

Derniere modification4/22/2026

Sourcekev

Observations honeypot0

CISA KEV

FournisseurCisco

ProduitAdaptive Security Appliance (ASA)

Nom vulnerabiliteCisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

Date ajout KEV2022-05-24

Date limite remediation2022-06-14

Utilise dans ransomwareUnknown

Produits affectes

cisco:adaptive_security_appliance_softwarecisco:asa_5500cisco:asa_5500-xcisco:asa_5500_csc-ssmcisco:asa_5505cisco:asa_5506-xcisco:asa_5506h-xcisco:asa_5506w-xcisco:asa_5508-xcisco:asa_5510cisco:asa_5512-xcisco:asa_5515-xcisco:asa_5516-xcisco:asa_5520cisco:asa_5525-xcisco:asa_5540cisco:asa_5545-xcisco:asa_5550cisco:asa_5555-xcisco:asa_5580cisco:asa_5585-xcisco:firewall_services_modulecisco:pix_firewall_501cisco:pix_firewall_506cisco:pix_firewall_506ecisco:pix_firewall_515cisco:pix_firewall_515ecisco:pix_firewall_520cisco:pix_firewall_525cisco:pix_firewall_535