CVE-2016-6366highunder attackCWE-120

CVE-2016-6366

Published · Updated

Follow this CVE+ Monitor Cisco Adaptive Security Appliance

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 8.8epss 88%
from disclosure to weaponsame day
Published on NVDAug 18
1st PoCAug 18
CISA KEV+2105d
Action required by CISAfederal deadline: 2022-06-14

Apply updates per vendor instructions.

In short

A buffer overflow vulnerability in Cisco ASA firewall devices allows authenticated users to send specially crafted network packets that can crash the device or execute malicious code. This is critical because firewalls protect entire networks, and compromising them gives attackers control over network traffic.

Technical detail

Remote authenticated attackers can trigger a buffer overflow in Cisco ASA SNMP processing by sending crafted IPv4 SNMP packets to affected devices (ASA 5500/5500-X, Services Module, 1000V, ASAv, Firepower 9300 ASA, PIX, FWSM running software through 9.4.2.3). Successful exploitation leads to arbitrary code execution with device privileges, requiring valid credentials for initial access.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.