CVE-2016-6367

תיאור (מקור, אנגלית)

Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

מדדים

CVSS 3.1

7.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — סבירות ניצול

23% (אחוזון 100) נכון ל-24/7/2026

CWE

CWE-77

מוצרים מושפעים

cisco: adaptive security appliance software; cisco: asa 5500; cisco: asa 5500-x; cisco: asa 5500 csc-ssm; cisco: asa 5505; cisco: asa 5506-x; cisco: asa 5506h-x; cisco: asa 5506w-x; cisco: asa 5508-x; cisco: asa 5510; cisco: asa 5512-x; cisco: asa 5515-x; cisco: asa 5516-x; cisco: asa 5520; cisco: asa 5525-x

קישורים

• http://blogs.cisco.com/security/shadow-brokers ExploitPress/Media CoverageVendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-‮… Vendor Advisory
• http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516 Vendor Advisory
• http://blogs.cisco.com/security/shadow-brokers ExploitPress/Media CoverageVendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-‮… Vendor Advisory
• http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516 Vendor Advisory
• https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/‮… Broken LinkExploit
• https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/‮… Broken LinkExploit
• http://www.securityfocus.com/bid/92520 Broken LinkThird Party AdvisoryVDB Entry
• http://www.securitytracker.com/id/1036636 Broken LinkThird Party AdvisoryVDB Entry