Cisco · Adaptive Security Appliance (ASA)
CVE-2016-6367
Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
What it is
Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.
CISA: A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: June 14, 2022
- Added to the CISA list
- May 24, 2022
- Published
- August 18, 2016
- Severity
- High 7.8 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 23% in the top 2.3% of all known vulnerabilities
- Weakness
- CWE-77
- More details
- NVD · CVE.org · CISA
All references (7)
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-cli
- https://www.exploit-db.com/exploits/40271/
- http://blogs.cisco.com/security/shadow-brokers
- http://www.securitytracker.com/id/1036636
- http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516
- http://www.securityfocus.com/bid/92520
- https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40271.zip
More exploited flaws from Cisco
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Nov 12, 2024 | Cross-Site Scripting (XSS) | Adaptive Security Appliance (ASA) | Medium 5.4 | 23% |
| May 24, 2022 | SNMP Buffer Overflow | Adaptive Security Appliance (ASA) | High 8.8 | 88% |
| Nov 3, 2021 | Denial-of-Service | Adaptive Security Appliance (ASA) | High 7.5 | 99.9% |
| Oct 14, 2026 | Relative Path Traversal | Secure Email Gateway | Critical 9.8 | 2.2% |
| Sep 30, 2026 | Hex Encoding | Catalyst SD-WAN Manager | Critical 9.8 | 39% |
| Sep 16, 2026 | Incorrect Use of Privileged APIs | Identity Services Engine | Critical 10.0 | 76% |
| Sep 14, 2026 | SQL Injection | Secure Email Gateway | Critical 9.8 | 30% |
| Sep 9, 2026 | Firewall Management Center Authentication Bypass Using an Alternate Path or Channel | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Critical 10.0 | 88% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.