CVE-2016-6367

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://blogs.cisco.com/security/shadow-brokersExploit, Press/Media Coverage, Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-cliVendor Advisory
http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516Vendor Advisory
http://www.securityfocus.com/bid/92520Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036636Broken Link, Third Party Advisory, VDB Entry
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40271.zipBroken Link, Exploit
https://www.exploit-db.com/exploits/40271/Third Party Advisory, VDB Entry
http://blogs.cisco.com/security/shadow-brokersExploit, Press/Media Coverage, Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-cliVendor Advisory
http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516Vendor Advisory
http://www.securityfocus.com/bid/92520Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036636Broken Link, Third Party Advisory, VDB Entry
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40271.zipBroken Link, Exploit
https://www.exploit-db.com/exploits/40271/Third Party Advisory, VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6367US Government Resource

Timeline

Published: Aug 18, 2016
Last modified: Jun 17, 2026
Added to CISA KEV: May 24, 2022
NVD status: Analyzed

Related CVEs from 2016

CVE-2016-63688.6A vulnerability in the detection engine parsing of Pragmatic General Multicast (PGM) protocol packets for Cisco Firepower System Software co CVE-2016-63697.8Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain p CVE-2016-63704.3Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allow CVE-2016-63717.5Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allow CVE-2016-63727.5A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco Async CVE-2016-63737.2The web-based GUI in Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote authenticated administrators to execute arbitrary OS command CVE-2016-63749.8Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP re CVE-2016-63755.3Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow remote atta CVE-2016-63766.5The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and CVE-2016-63778.1Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authenticati CVE-2016-63787.5Cisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of service (device reload) via crafted ICMP pa CVE-2016-63797.5Cisco IOS 12.2 and IOS XE 3.14 through 3.16 and 16.1 allow remote attackers to cause a denial of service (device reload) via crafted IP Deta