CVE Watch—

CVE-2016-6367

Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

CVSS

—

No CVSS

EPSS

22.6%

p98

KEV

YES

May 24, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

22.6%EPSS · 30 days22.6%

2026-09-162026-10-14

KEV catalog record

Product

Cisco / Adaptive Security Appliance (ASA)

Vulnerability

Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

Added to KEV

May 24, 2022

Remediate by

Jun 14, 2022

Known ransomware use

Summary description

A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-6367

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2018-02967.5 HIG

100.0%

KEV—80Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability65d CVE-2016-6366—

99.8%

KEV—80Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability—CVE-2014-2120—

97.7%

KEV—79Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability—