CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2016-08-18
Cisco ASA CLI Command Injection and Privilege Escalation Vulnerability (CVE-2016-6367, EPICBANANA)
[Affected Scope] Cisco ASA Software prior to version 8.4(1) running on ASA 5500, ASA 5500-X, PIX, and FWSM devices
[Impact] Local authenticated attackers can execute invalid CLI commands to bypass access controls, escalate privileges to root, and fully compromise the device
[Mitigation] Upgrade Cisco ASA Software to version 8.4(1) or later, and restrict CLI access (SSH/Console) using strict AAA and firewall rules