CVE-2016-6367

HIGH

7.8

CVSS Score

Published: August 18, 2016 at 06:00 PM UTC

Updated: June 17, 2026 at 12:50 AM UTC

30 products affected across 1 vendorAdaptive Security ApplianceASA 5580ASA 5500

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploitation

CISA KEV

Exploit prediction

EPSS 23%

SSVC

Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score22.6%

EPSS (Exploit Prediction Scoring System) estimates a 22.6% chance this CVE is exploited in the wild within the next 30 days — higher than 98% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code.

Required Action

Apply updates per vendor instructions.

Ransomware Use

Unknown

Added to KEV

May 24, 2022

Remediation Due

Jun 14, 2022

1596 days overdue

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-6367

Description

Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Adaptive Security Appliance · Cisco

95%

7.2.0 ≤ v < 8.4(3)8.5 ≤ v < 9.0(1)

Affected range stops below 8.4(3), so it looks safe — our inference, not a vendor statement

Affected range stops below 9.0(1), so it looks safe — our inference, not a vendor statement

cisco-asa-5500 (environment) · cisco-asa-5500-csc-ssm (environment) · cisco-asa-5500-x (environment) · cisco-asa-5505 (environment) · cisco-asa-5506-x (environment) · cisco-asa-5506h-x (environment) · cisco-asa-5506w-x (environment) · cisco-asa-5508-x (environment) · cisco-asa-5510 (environment) · cisco-asa-5512-x (environment) · cisco-asa-5515-x (environment) · cisco-asa-5516-x (environment) · cisco-asa-5520 (environment) · cisco-asa-5525-x (environment) · cisco-asa-5540 (environment) · cisco-asa-5545-x (environment) · cisco-asa-5550 (environment) · cisco-asa-5555-x (environment) · cisco-asa-5580 (environment) · cisco-asa-5585-x (environment) · cisco-firewall-services-module (environment) · cisco-pix-firewall-501 (environment) · cisco-pix-firewall-506 (environment) · cisco-pix-firewall-506e (environment) · cisco-pix-firewall-515 (environment) · cisco-pix-firewall-515e (environment) · cisco-pix-firewall-520 (environment) · cisco-pix-firewall-525 (environment) · cisco-pix-firewall-535 (environment)

ASA 5500 · Ciscodevice

80%

All versions

Asa 5500 Csc-Ssm · Ciscodevice

80%

All versions

Asa 5500-X · Ciscodevice

80%

All versions

ASA 5505 · Ciscodevice

80%

All versions