← Voltar para CVEs
CVE-2016-6367
HIGHCISA KEV7.8
Descricao
Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.
Detalhes CVE
Pontuacao CVSS v3.17.8
SeveridadeHIGH
Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vetor de ataqueLOCAL
ComplexidadeLOW
Privilegios necessariosLOW
Interacao do usuarioNONE
Publicado8/18/2016
Ultima modificacao4/22/2026
Fontekev
Avistamentos honeypot0
CISA KEV
FornecedorCisco
ProdutoAdaptive Security Appliance (ASA)
Nome da vulnerabilidadeCisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
Data inclusao KEV2022-05-24
Prazo de remediacao2022-06-14
Uso em ransomwareUnknown
Produtos afetados
cisco:adaptive_security_appliance_softwarecisco:asa_5500cisco:asa_5500-xcisco:asa_5500_csc-ssmcisco:asa_5505cisco:asa_5506-xcisco:asa_5506h-xcisco:asa_5506w-xcisco:asa_5508-xcisco:asa_5510cisco:asa_5512-xcisco:asa_5515-xcisco:asa_5516-xcisco:asa_5520cisco:asa_5525-xcisco:asa_5540cisco:asa_5545-xcisco:asa_5550cisco:asa_5555-xcisco:asa_5580cisco:asa_5585-xcisco:firewall_services_modulecisco:pix_firewall_501cisco:pix_firewall_506cisco:pix_firewall_506ecisco:pix_firewall_515cisco:pix_firewall_515ecisco:pix_firewall_520cisco:pix_firewall_525cisco:pix_firewall_535
Fraquezas (CWE)
CWE-77CWE-77
Referencias
http://blogs.cisco.com/security/shadow-brokers(psirt@cisco.com)
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-cli(psirt@cisco.com)
http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516(psirt@cisco.com)
http://www.securityfocus.com/bid/92520(psirt@cisco.com)
http://www.securitytracker.com/id/1036636(psirt@cisco.com)
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40271.zip(psirt@cisco.com)
https://www.exploit-db.com/exploits/40271/(psirt@cisco.com)
http://blogs.cisco.com/security/shadow-brokers(af854a3a-2127-422b-91ae-364da2661108)
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-cli(af854a3a-2127-422b-91ae-364da2661108)
http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516(af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/92520(af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id/1036636(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40271.zip(af854a3a-2127-422b-91ae-364da2661108)
https://www.exploit-db.com/exploits/40271/(af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6367(134c704f-9b21-4f2e-91b3-4a467353bcc0)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.