CVE-2016-6366
HighActively exploited (CISA KEV)
Description
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.
SeverityHigh
CVSS8.8
Exploit probability—
Product
Cisco Adaptive Security Appliance (ASA)
PublishedAug 18, 2016
First seenAug 18, 2016
Added to KEVMay 24, 2022
Weakness typeCWE-120CWE-120
How to fix
CISA required action
Apply updates per vendor instructions.
CISA due date: Jun 14, 2022Update
- cisco adaptive_security_appliance_software9.0.4.40, 9.1.7\(9\), 9.2.4\(14\), 9.3.3\(10\), 9.4.3\(8\), 9.6.1\(11\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco adaptive_security_appliance_software | 7.2.1 ≤ v < 9.0.4.40, 9.1.1 ≤ v < 9.1.7\(9\), 9.2.0 ≤ v < 9.2.4\(14\), 9.3.0 ≤ v < 9.3.3\(10\), 9.4.0.115 ≤ v < 9.4.3\(8\), 9.5.0 ≤ v ≤ 9.5\(3\), 9.6.0 ≤ v < 9.6.1\(11\) | 9.0.4.40, 9.1.7\(9\), 9.2.4\(14\), 9.3.3\(10\), 9.4.3\(8\), 9.6.1\(11\) |
| cisco pix_firewall_software | No range specified | — |
| cisco asa_1000v_cloud_firewall_software | 8.7.1, 8.7.1.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.