CVE-2016-6367

Warning

Media report

Exploit

EPSS 23.09%
Published 18.08.2016 18:59:01
Last modified 12.04.2025 10:46:40
Source psirt@cisco.com
Teams watchlist Login
Open Login

Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

Affected products Warnungen 1 Metrics 3 CWE 1 References 10

Data is provided by the National Vulnerability Database (NVD)

Cisco ≫ Adaptive Security Appliance Software Version >= 7.2.0 < 8.4\(3\)

   Cisco ≫ Asa 5500 Version-
   Cisco ≫ Asa 5500-x Version-
   Cisco ≫ Asa 5500 Csc-ssm Version-
   Cisco ≫ Asa 5505 Version-
   Cisco ≫ Asa 5506-x Version-
   Cisco ≫ Asa 5506h-x Version-
   Cisco ≫ Asa 5506w-x Version-
   Cisco ≫ Asa 5508-x Version-
   Cisco ≫ Asa 5510 Version-
   Cisco ≫ Asa 5512-x Version-
   Cisco ≫ Asa 5515-x Version-
   Cisco ≫ Asa 5516-x Version-
   Cisco ≫ Asa 5520 Version-
   Cisco ≫ Asa 5525-x Version-
   Cisco ≫ Asa 5540 Version-
   Cisco ≫ Asa 5545-x Version-
   Cisco ≫ Asa 5550 Version-
   Cisco ≫ Asa 5555-x Version-
   Cisco ≫ Asa 5580 Version-
   Cisco ≫ Asa 5585-x Version-
   Cisco ≫ Firewall Services Module Version-
   Cisco ≫ Pix Firewall 501 Version-
   Cisco ≫ Pix Firewall 506 Version-
   Cisco ≫ Pix Firewall 506e Version-
   Cisco ≫ Pix Firewall 515 Version-
   Cisco ≫ Pix Firewall 515e Version-
   Cisco ≫ Pix Firewall 520 Version-
   Cisco ≫ Pix Firewall 525 Version-
   Cisco ≫ Pix Firewall 535 Version-

Cisco ≫ Adaptive Security Appliance Software Version >= 8.5 < 9.0\(1\)

24.05.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

Vulnerability

A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code.

Description

Apply updates per vendor instructions.

Required actions

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	23.09%	0.957

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	6.8	3.1	10	AV:L/AC:L/Au:S/C:C/I:C/A:C

CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

http://blogs.cisco.com/security/shadow-brokers

Vendor Advisory

Exploit

Press/Media Coverage

http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-cli

Vendor Advisory

http://www.securityfocus.com/bid/92520

Third Party Advisory

Broken Link

VDB Entry