CVE-2016-6366

cisco pix firewall software, cisco adaptive security appliance software, cisco asa 1000v cloud firewall software

Published 18 Aug 2016 · updated 17 Jun 2026 · Analyzed

8.8 High · CVSS 3.1, NVD

Exploited in the wild

CISA added this to its Known Exploited Vulnerabilities catalog on 24 May 2022, with a remediation deadline of 14 Jun 2022 for US federal agencies.

Required action: Apply updates per vendor instructions.

Description

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

References

blogs.cisco.com/security/shadow-brokers · Exploit, Press/Media Coverage, Vendor Advisory
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp · Vendor Advisory
tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516 · Vendor Advisory
www.securityfocus.com/bid/92521 · Broken Link, Not Applicable, Third Party Advisory
www.securitytracker.com/id/1036637 · Broken Link, Third Party Advisory, VDB Entry
github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip · Broken Link, Exploit
www.exploit-db.com/exploits/40258/ · Third Party Advisory, VDB Entry
zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html · Exploit, Technical Description
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6366 · US Government Resource