CVE-2016-6367
Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
Published Aug 18, 2016 · updated Jun 16, 2026 · cisco adaptive security appliance software
Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.
Timeline
Detection, updates, and resolution for this record.
Aug 18, 2016 · Catalog
Detected
Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.
May 24, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Jun 14, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.
Required action
Apply updates per vendor instructions.
CISA due date Jun 14, 2022
Affected
- cpe cisco/adaptive security appliance softwareversion unspecified
- vendor Cisco Adaptive Security Appliance (ASA)version unspecified
Sources
- CISA KEVCVE-2016-6367
A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code.
cisa.gov - CVE.orgCVE-2016-6367
Official CVE identifier
cve.org - FIRST EPSSCVE-2016-6367
30-day exploitation probability 22.6%
first.org - Exploit Database40271
Public archive entry. The exploit body is not stored here.
exploit-db.com - NIST NVDCVE-2016-6367
Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.
nvd.nist.gov