CVE-2016-6366
high · 8.8Actively exploitedOn the CISA Known Exploited Vulnerabilities catalog
Apply updates per vendor instructions.
Added 2022-05-24Remediation due 2022-06-14
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.
8.8
CVSS
87.6%
EPSS (exploit prob.)
100th
EPSS percentile
2016-08-18
Published
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-120
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | pix_firewall_software | all versions |
| cisco | pix_firewall_501 | all versions |
| cisco | pix_firewall_506 | all versions |
| cisco | pix_firewall_506e | all versions |
| cisco | pix_firewall_515 | all versions |
| cisco | pix_firewall_515e | all versions |
| cisco | pix_firewall_520 | all versions |
| cisco | pix_firewall_525 | all versions |
| cisco | pix_firewall_535 | all versions |
| cisco | adaptive_security_appliance_software | >= 7.2.1, < 9.0.4.40 |
| cisco | adaptive_security_appliance_software | >= 9.1.1, < 9.1.7\(9\) |
| cisco | adaptive_security_appliance_software | >= 9.2.0, < 9.2.4\(14\) |
| cisco | adaptive_security_appliance_software | >= 9.3.0, < 9.3.3\(10\) |
| cisco | adaptive_security_appliance_software | >= 9.4.0.115, < 9.4.3\(8\) |
| cisco | adaptive_security_appliance_software | >= 9.5.0, <= 9.5\(3\) |
| cisco | adaptive_security_appliance_software | >= 9.6.0, < 9.6.1\(11\) |
| cisco | 7604 | all versions |
| cisco | 7606-s | all versions |
| cisco | 7609-s | all versions |
| cisco | 7613-s | all versions |
| cisco | asa_5500 | all versions |
| cisco | asa_5500-x | all versions |
| cisco | asa_5500_csc-ssm | all versions |
| cisco | asa_5505 | all versions |
| cisco | asa_5506-x | all versions |
| cisco | asa_5506h-x | all versions |
| cisco | asa_5506w-x | all versions |
| cisco | asa_5508-x | all versions |
| cisco | asa_5510 | all versions |
| cisco | asa_5512-x | all versions |
| cisco | asa_5515-x | all versions |
| cisco | asa_5516-x | all versions |
| cisco | asa_5520 | all versions |
| cisco | asa_5525-x | all versions |
| cisco | asa_5540 | all versions |
| cisco | asa_5545-x | all versions |
| cisco | asa_5550 | all versions |
| cisco | asa_5555-x | all versions |
| cisco | asa_5580 | all versions |
| cisco | asa_5585-x | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://blogs.cisco.com/security/shadow-brokers
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp
- http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516
- http://www.securityfocus.com/bid/92521
- http://www.securitytracker.com/id/1036637
- https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip
- https://www.exploit-db.com/exploits/40258/
- https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html
- http://blogs.cisco.com/security/shadow-brokers
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp
- http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516
- http://www.securityfocus.com/bid/92521
- http://www.securitytracker.com/id/1036637
- https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip
- https://www.exploit-db.com/exploits/40258/
- https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6366
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2016-6366