CVE-2016-6367

high · 7.8Actively exploited

On the CISA Known Exploited Vulnerabilities catalog

Apply updates per vendor instructions.

Added 2022-05-24Remediation due 2022-06-14

Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

7.8

CVSS

22.6%

EPSS (exploit prob.)

98th

EPSS percentile

2016-08-18

Published

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-77

Affected products

Vendor	Product	Affected versions
cisco	adaptive_security_appliance_software	>= 7.2.0, < 8.4\(3\)
cisco	adaptive_security_appliance_software	>= 8.5, < 9.0\(1\)
cisco	asa_5500	all versions
cisco	asa_5500-x	all versions
cisco	asa_5500_csc-ssm	all versions
cisco	asa_5505	all versions
cisco	asa_5506-x	all versions
cisco	asa_5506h-x	all versions
cisco	asa_5506w-x	all versions
cisco	asa_5508-x	all versions
cisco	asa_5510	all versions
cisco	asa_5512-x	all versions
cisco	asa_5515-x	all versions
cisco	asa_5516-x	all versions
cisco	asa_5520	all versions
cisco	asa_5525-x	all versions
cisco	asa_5540	all versions
cisco	asa_5545-x	all versions
cisco	asa_5550	all versions
cisco	asa_5555-x	all versions
cisco	asa_5580	all versions
cisco	asa_5585-x	all versions
cisco	firewall_services_module	all versions
cisco	pix_firewall_501	all versions
cisco	pix_firewall_506	all versions
cisco	pix_firewall_506e	all versions
cisco	pix_firewall_515	all versions
cisco	pix_firewall_515e	all versions
cisco	pix_firewall_520	all versions
cisco	pix_firewall_525	all versions
cisco	pix_firewall_535	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2016-6367