← Back

CVE-2016-6366

nvd nist
Published: Aug 18, 2016Modified: Apr 22, 2026CISA KEV

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

Affected (10)

3 products
Pix Firewall Software
Asa 1000v Cloud Firewall Software
Configuration A
1 vulnerable · 8 platform
Vulnerable SoftwareAffected Versions
All versions
Running on/withPlatform Versions
Cisco
Pix Firewall 501
All versions
Cisco
Pix Firewall 506
All versions
Cisco
Pix Firewall 506e
All versions
Cisco
Pix Firewall 515
All versions
Cisco
Pix Firewall 515e
All versions
Cisco
Pix Firewall 520
All versions
Cisco
Pix Firewall 525
All versions
Cisco
Pix Firewall 535
All versions
Configuration B
7 vulnerable · 34 platform
Vulnerable SoftwareAffected Versions
Cisco
From 7.2.1 to 9.0.4.40
From 9.1.1 to 9.1.7\(9\)
From 9.2.0 to 9.2.4\(14\)
From 9.3.0 to 9.3.3\(10\)
From 9.4.0.115 to 9.4.3\(8\)
From 9.5.0 to 9.5\(3\)
From 9.6.0 to 9.6.1\(11\)
Running on/withPlatform Versions
Cisco
7604
All versions
Cisco
7606 S
All versions
Cisco
7609 S
All versions
Cisco
7613 S
All versions
Cisco
Asa 5500
All versions
Cisco
Asa 5500 X
All versions
Cisco
Asa 5500 Csc Ssm
All versions
Cisco
Asa 5505
All versions
Cisco
Asa 5506 X
All versions
Cisco
Asa 5506h X
All versions
Cisco
Asa 5506w X
All versions
Cisco
Asa 5508 X
All versions
Cisco
Asa 5510
All versions
Cisco
Asa 5512 X
All versions
Cisco
Asa 5515 X
All versions
Cisco
Asa 5516 X
All versions
Cisco
Asa 5520
All versions
Cisco
Asa 5525 X
All versions
Cisco
Asa 5540
All versions
Cisco
Asa 5545 X
All versions
Cisco
Asa 5550
All versions
Cisco
Asa 5555 X
All versions
Cisco
Asa 5580
All versions
Cisco
Asa 5585 X
All versions
Cisco
Catalyst 6500
All versions
Cisco
Catalyst 6500 E
All versions
Cisco
Catalyst 6503 E
All versions
Cisco
Catalyst 6504 E
All versions
Cisco
Catalyst 6506 E
All versions
Cisco
Catalyst 6509 E
All versions
Cisco
Catalyst 6509 Neb A
All versions
Cisco
Catalyst 6509 V E
All versions
Cisco
Catalyst 6513
All versions
Cisco
Catalyst 6513 E
All versions
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Version 8.7.1.1
Version 8.7.1

References (17)

Source: psirt@cisco.com
ExploitPress/Media CoverageVendor Advisory
Source: psirt@cisco.com
Broken LinkNot ApplicableThird Party AdvisoryVDB Entry
Source: psirt@cisco.com
Broken LinkThird Party AdvisoryVDB Entry
Source: psirt@cisco.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPress/Media CoverageVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkNot ApplicableThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitTechnical Description
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.