---
id: "CVE-2016-6367"
kind: "vulnerability"
aliases: ["CVE-2016-6367"]
title: "Cisco Adaptive Security Appliance (ASA): Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability"
severity: "high"
cvss: 7.8
epss: 0.22583
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Cisco Adaptive Security Appliance (ASA)", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["asa", "cisco", "exploited", "firewall", "infrastructure", "self-hosted"]
not_affected_if: ["no-asa-appliances", "no-cli-admin-accounts"]
published_at: "2016-08-18T18:59:01+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-6367", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6367", "first_seen_at": "2026-10-23T19:13:45+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6367", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Cisco Adaptive Security Appliance (ASA): Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability

A flaw in the command-line parser of Cisco ASA firewall software lets an attacker who already has CLI access crash the device or possibly run code on it. CISA lists it as exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Cisco Adaptive Security Appliance (ASA) affected ? fixed ?

## How to check

Run 'show version' on each ASA and compare against the fixed release in Cisco's advisory; unknown whether the sources give a specific command beyond that.

## Fix

Apply the update per Cisco's vendor instructions (as CISA requires); exact fixed version: unknown.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-6367
- 2026-10-23T19:13:45+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2016-6367
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2016-6367

## From the sources

A vulnerability in the command-line interface (CLI) parser of Cisco ASA software could allow an authenticated, local attacker to create a denial-of-service (DoS) condition or potentially execute code.

CISA required action: Apply updates per vendor instructions.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_