Vulnerability Intelligence Report
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
CVE-2016-6366
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.
CISA KEV
SSVC: Active Exploitation
CVSS Base Score
8.8
HIGH
Exploitability:2.9
Impact Score:5.9
EPSS Probability:87.50%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-120 ↗CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| cisco | pix_firewall_software | all |
| cisco | pix_firewall_501 | all |
| cisco | pix_firewall_506 | all |
| cisco | pix_firewall_506e | all |
| cisco | pix_firewall_515 | all |
| cisco | pix_firewall_515e | all |
| cisco | pix_firewall_520 | all |
| cisco | pix_firewall_525 | all |
| cisco | pix_firewall_535 | all |
| cisco | adaptive_security_appliance_software | all |
| cisco | 7604 | all |
| cisco | 7606-s | all |
| cisco | 7609-s | all |
| cisco | 7613-s | all |
| cisco | asa_5500 | all |
| cisco | asa_5500-x | all |
| cisco | asa_5500_csc-ssm | all |
| cisco | asa_5505 | all |
| cisco | asa_5506-x | all |
| cisco | asa_5506h-x | all |
| cisco | asa_5506w-x | all |
| cisco | asa_5508-x | all |
| cisco | asa_5510 | all |
| cisco | asa_5512-x | all |
| cisco | asa_5515-x | all |
| cisco | asa_5516-x | all |
| cisco | asa_5520 | all |
| cisco | asa_5525-x | all |
| cisco | asa_5540 | all |
| cisco | asa_5545-x | all |
| cisco | asa_5550 | all |
| cisco | asa_5555-x | all |
| cisco | asa_5580 | all |
| cisco | asa_5585-x | all |
| cisco | catalyst_6500 | all |
| cisco | catalyst_6500-e | all |
| cisco | catalyst_6503-e | all |
| cisco | catalyst_6504-e | all |
| cisco | catalyst_6506-e | all |
| cisco | catalyst_6509-e | all |
| cisco | catalyst_6509-neb-a | all |
| cisco | catalyst_6509-v-e | all |
| cisco | catalyst_6513 | all |
| cisco | catalyst_6513-e | all |
| cisco | asa_1000v_cloud_firewall_software | 8.7.1, 8.7.1.1 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Cisco Systems, Inc. · Hosted Service · USA |
| Reserved | 2016-07-26T00:00:00 |
| Published | 2016-08-18T18:00:00 |
| Patch Date | 2016-08-17 |
| Last Updated | 2026-01-12T20:50:50 |
Community Chatter & Buzz