CVE-2016-6367

Warnung

Medienbericht

Exploit

EPSS 22.58%
Veröffentlicht 18.08.2016 18:59:01
Zuletzt bearbeitet 22.04.2026 15:43:14
Erkennungen
Login

Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

Betroffene Produkte Warnungen 1 Metriken 4 CWE 1 Referenzen 11

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Adaptive Security Appliance Software Version >= 7.2.0 < 8.4\(3\)

   Cisco ≫ Asa 5500 Version -
   Cisco ≫ Asa 5500-x Version -
   Cisco ≫ Asa 5500 Csc-ssm Version -
   Cisco ≫ Asa 5505 Version -
   Cisco ≫ Asa 5506-x Version -
   Cisco ≫ Asa 5506h-x Version -
   Cisco ≫ Asa 5506w-x Version -
   Cisco ≫ Asa 5508-x Version -
   Cisco ≫ Asa 5510 Version -
   Cisco ≫ Asa 5512-x Version -
   Cisco ≫ Asa 5515-x Version -
   Cisco ≫ Asa 5516-x Version -
   Cisco ≫ Asa 5520 Version -
   Cisco ≫ Asa 5525-x Version -
   Cisco ≫ Asa 5540 Version -
   Cisco ≫ Asa 5545-x Version -
   Cisco ≫ Asa 5550 Version -
   Cisco ≫ Asa 5555-x Version -
   Cisco ≫ Asa 5580 Version -
   Cisco ≫ Asa 5585-x Version -
   Cisco ≫ Firewall Services Module Version -
   Cisco ≫ Pix Firewall 501 Version -
   Cisco ≫ Pix Firewall 506 Version -
   Cisco ≫ Pix Firewall 506e Version -
   Cisco ≫ Pix Firewall 515 Version -
   Cisco ≫ Pix Firewall 515e Version -
   Cisco ≫ Pix Firewall 520 Version -
   Cisco ≫ Pix Firewall 525 Version -
   Cisco ≫ Pix Firewall 535 Version -

Cisco ≫ Adaptive Security Appliance Software Version >= 8.5 < 9.0\(1\)

24.05.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

Schwachstelle

A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	22.58%	0.974

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST	6.8	3.1	10	AV:L/AC:L/Au:S/C:C/I:C/A:C
CISA-ADP	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

http://blogs.cisco.com/security/shadow-brokers

Vendor Advisory

Exploit

Press/Media Coverage

http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-cli

Vendor Advisory

http://www.securityfocus.com/bid/92520

Third Party Advisory

Broken Link

VDB Entry

http://www.securitytracker.com/id/1036636

Third Party Advisory

Broken Link

VDB Entry

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40271.zip

Exploit

Broken Link

https://www.exploit-db.com/exploits/40271/

Third Party Advisory

VDB Entry

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6367

US Government Resource

https://nvd.nist.gov/vuln/detail/CVE-2016-6367

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-6367

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-6367

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2016-6367

24.05.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog