CVE-2016-6366
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD
Description
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.
Affected (10)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Cisco Pix Firewall 501 | All versions |
Cisco Pix Firewall 506 | All versions |
Cisco Pix Firewall 506e | All versions |
Cisco Pix Firewall 515 | All versions |
Cisco Pix Firewall 515e | All versions |
Cisco Pix Firewall 520 | All versions |
Cisco Pix Firewall 525 | All versions |
Cisco Pix Firewall 535 | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| From 7.2.1 to 9.0.4.40 |
| Running on/with | Platform Versions |
|---|---|
Cisco 7604 | All versions |
Cisco 7606 S | All versions |
Cisco 7609 S | All versions |
Cisco 7613 S | All versions |
Cisco Asa 5500 | All versions |
Cisco Asa 5500 X | All versions |
Cisco Asa 5500 Csc Ssm | All versions |
Cisco Asa 5505 | All versions |
Cisco Asa 5506 X | All versions |
Cisco Asa 5506h X | All versions |
Cisco Asa 5506w X | All versions |
Cisco Asa 5508 X | All versions |
Cisco Asa 5510 | All versions |
Cisco Asa 5512 X | All versions |
Cisco Asa 5515 X | All versions |
Cisco Asa 5516 X | All versions |
Cisco Asa 5520 | All versions |
Cisco Asa 5525 X | All versions |
Cisco Asa 5540 | All versions |
Cisco Asa 5545 X | All versions |
Cisco Asa 5550 | All versions |
Cisco Asa 5555 X | All versions |
Cisco Asa 5580 | All versions |
Cisco Asa 5585 X | All versions |
Cisco Catalyst 6500 | All versions |
Cisco Catalyst 6500 E | All versions |
Cisco Catalyst 6503 E | All versions |
Cisco Catalyst 6504 E | All versions |
Cisco Catalyst 6506 E | All versions |
Cisco Catalyst 6509 E | All versions |
Cisco Catalyst 6509 Neb A | All versions |
Cisco Catalyst 6509 V E | All versions |
Cisco Catalyst 6513 | All versions |
Cisco Catalyst 6513 E | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 8.7.1.1 |
References (17)
Source: psirt@cisco.com
ExploitPress/Media CoverageVendor Advisory
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Broken LinkNot ApplicableThird Party AdvisoryVDB Entry
Source: psirt@cisco.com
Broken LinkThird Party AdvisoryVDB Entry
Source: psirt@cisco.com
Broken LinkExploit
Source: psirt@cisco.com
ExploitTechnical Description
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPress/Media CoverageVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkNot ApplicableThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkExploit
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitTechnical Description
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource
Timeline
No history available yet.