CVE-2016-6367
HighPublished
Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability
- Published
- Aug 18, 2016
- Updated
- Jan 12, 2026
- Assigning CNA
- cisco
- Evidence observed
- Aug 19, 2016
Primary CVSS
7.8/ 10High
nvd · CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H22.6%
Moderate · next 30 days
- Percentile
- 97.7%
- Model date
- Oct 15, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
CISA Known Exploited
This CVE appears in the CISA Known Exploited Vulnerabilities catalog.
Summary
Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.
Sources
Shadow Brokers · hardware · Aug 19, 2016
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.