CVE-2016-6367

7.8 HIGH CISA KEV - Actively Exploited

Published: August 18, 2016 Modified: October 22, 2025

Description

Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://blogs.cisco.com/security/shadow-brokers

Source: psirt@cisco.com

Exploit Press/Media Coverage Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-cli

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516

Source: psirt@cisco.com

Vendor Advisory

http://www.securityfocus.com/bid/92520

Source: psirt@cisco.com

Broken Link Third Party Advisory VDB Entry

http://www.securitytracker.com/id/1036636

Source: psirt@cisco.com

Broken Link Third Party Advisory VDB Entry

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40271.zip

Source: psirt@cisco.com

Broken Link Exploit

https://www.exploit-db.com/exploits/40271/

Source: psirt@cisco.com

Third Party Advisory VDB Entry

http://blogs.cisco.com/security/shadow-brokers