CVE-2016-6367 Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or E...
HighCVSS 7.8
EPSS 22.6%
CISA KEV
added 2022-05-24 · due 2022-06-14
Exploited in the wild
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.
CISA Known Exploited Vulnerability
- Date added
- 2022-05-24
- Due date (FCEB)
- 2022-06-14
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco adaptive security appliance software | >= 7.2.0, < 8.4\(3\) | 8.4\(3\) |
| cisco adaptive security appliance software | >= 8.5, < 9.0\(1\) | 9.0\(1\) |
References
- blogs.cisco.com exploit press-media-coverage vendor-advisory
- 20160817 Cisco Adaptive Security Appliance CLI Remote Code Execution Vulnerability vendor-advisory
- tools.cisco.com vendor-advisory
- 92520 broken-link third-party-advisory vdb-entry
- 1036636 broken-link third-party-advisory vdb-entry
- github.com broken-link exploit
- 40271 exploit third-party-advisory vdb-entry
- www.cisa.gov government-resource us-government-resource