8.8high
CVE-2016-6366KEVin critical feed1 exploit
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V…
Published 10 y ago · modified 4 mo ago · JSON
CVSS
8.8
v3.1 · CNA
CISA KEV
Yes
added 2022-05-24
EPSS
87.6%
percentile 100%
Public exploits
1
Exploit-DB
Summary
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.
Known exploited (CISA KEV)
- Added
- 4 y ago
- Due date
- 2022-06-14 (4 y ago)
- Ransomware use
- Unknown
- Required action
- Apply updates per vendor instructions.
- Vendor / product
- Cisco / Adaptive Security Appliance (ASA)
- CISA name
- Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
CISA SSVC assessment
- Exploitation
- Active — exploited in the wild
- Automatable
- no
- Technical impact
- total
- Assessed
- 23 mo ago
Exploit prediction (EPSS)
87.56% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.
Exploits and detections
- EDB-40258 Cisco ASA 8.x - 'EXTRABACON' Authentication Bypass · remote · 2016-08-18
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CISA ADP | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 8.5 | AV:N/AC:M/Au:S/C:C/I:C/A:C |
Classification
- Weakness
- CWE-120 Buffer Copy without Checking Size of Input
References
- securityfocus.com /bid/92521 · vdb-entry, x_refsource_BID, x_transferred
- github.com /offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip · x_refsource_MISC, x_transferred
- blogs.cisco.com /security/shadow-brokers · x_refsource_CONFIRM, x_transferred
- tools.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp · vendor-advisory, x_refsource_CISCO, x_transferred
- tools.cisco.com /security/center/viewErp.x?alertId=ERP-56516 · x_refsource_CONFIRM, x_transferred
- zerosum0x0.blogspot.com /2016/09/reverse-engineering-cisco-asa-for.html · x_refsource_MISC, x_transferred
- exploit-db.com /exploits/40258/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- securitytracker.com /id/1036637 · vdb-entry, x_refsource_SECTRACK, x_transferred
- cisa.gov /known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6366 · government-resource
Sources
- CVE List: CVE-2016-6366
- NVD: CVE-2016-6366
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.