Back to KEVs

CVE-2016-6366

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv,...

Basic Information

CVE State
PUBLISHED
Reserved Date
July 26, 2016
Published Date
August 18, 2016
Last Updated
November 15, 2024
Vendor
n/a
Product
n/a
Description
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

CVSS Scores

CVSS v3.1

8.8 - HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC Information

Exploitation
active
Technical Impact
total

Exploit Status

Exploited in the Wild
Yes (added 2022-05-24 00:00:00 UTC) Source
Proof of Concept Available
Yes (added 2016-09-20 23:19:02 UTC) Source

References

http://www.securityfocus.com/bid/92521 https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip http://blogs.cisco.com/security/shadow-brokers http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516 https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html https://www.exploit-db.com/exploits/40258/ http://www.securitytracker.com/id/1036637

Known Exploited Vulnerability Information

Source Added Date
CISA 2022-05-24 00:00:00 UTC

Potential Proof of Concepts

Warning: These PoCs have not been tested and could contain malware. Use at your own risk.

RiskSense-Ops/CVE-2016-6366

Type: github • Created: 2016-09-20 23:19:02 UTC • Stars: 159

Public repository for improvements to the EXTRABACON exploit