CVE-2016-6367

Опубликовано: 18 авг. 2016

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Средний

Описание

Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain privileges via invalid CLI commands, aka Bug ID CSCtu74257 or EPICBANANA.

Комментарий

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Ссылки

http://blogs.cisco.com/security/shadow-brokers
Exploit
Press/Media Coverage
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-cli
Vendor Advisory
http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516
Vendor Advisory
http://www.securityfocus.com/bid/92520
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036636
Broken Link
Third Party Advisory
VDB Entry
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40271.zip
Broken Link
Exploit
https://www.exploit-db.com/exploits/40271/
Third Party Advisory
VDB Entry
http://blogs.cisco.com/security/shadow-brokers
Exploit
Press/Media Coverage
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-cli
Vendor Advisory
http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516
Vendor Advisory
http://www.securityfocus.com/bid/92520
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1036636
Broken Link
Third Party Advisory
VDB Entry
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40271.zip
Broken Link
Exploit
https://www.exploit-db.com/exploits/40271/
Third Party Advisory
VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6367

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*

Версия от 7.2.0 (включая) до 8.4\(3\) (исключая)

cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*

Версия от 8.5 (включая) до 9.0\(1\) (исключая)

Одно из

cpe:2.3:h:cisco:asa_5500:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5500-x:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5500_csc-ssm:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5505:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5506-x:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5506h-x:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5506w-x:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5508-x:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5510:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5512-x:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5515-x:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5516-x:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5520:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5525-x:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5540:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5545-x:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5550:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5555-x:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5580:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:asa_5585-x:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:firewall_services_module:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:pix_firewall_501:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:pix_firewall_506:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:pix_firewall_506e:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:pix_firewall_515:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:pix_firewall_515e:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:pix_firewall_520:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:pix_firewall_525:-:*:*:*:*:*:*:*

cpe:2.3:h:cisco:pix_firewall_535:-:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.23087

Средний

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-77

Связанные уязвимости

GHSA-cxx8-9qq9-rm4x

CVSS3: 7.8

github

больше 3 лет назад

BDU:2016-01926

fstec

больше 9 лет назад

Уязвимость микропрограммного обеспечения Cisco Adaptive Security Appliance, позволяющая нарушителю вызвать отказ в обслуживании или выполнить произвольный код