CVE-2016-6366

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://blogs.cisco.com/security/shadow-brokersExploit, Press/Media Coverage, Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmpVendor Advisory
http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516Vendor Advisory
http://www.securityfocus.com/bid/92521Broken Link, Not Applicable, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036637Broken Link, Third Party Advisory, VDB Entry
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zipBroken Link, Exploit
https://www.exploit-db.com/exploits/40258/Third Party Advisory, VDB Entry
https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.htmlExploit, Technical Description
http://blogs.cisco.com/security/shadow-brokersExploit, Press/Media Coverage, Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmpVendor Advisory
http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516Vendor Advisory
http://www.securityfocus.com/bid/92521Broken Link, Not Applicable, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1036637Broken Link, Third Party Advisory, VDB Entry
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zipBroken Link, Exploit
https://www.exploit-db.com/exploits/40258/Third Party Advisory, VDB Entry
https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.htmlExploit, Technical Description
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6366US Government Resource

Timeline

Published: Aug 18, 2016
Last modified: Jun 17, 2026
Added to CISA KEV: May 24, 2022
NVD status: Analyzed

Related CVEs from 2016

CVE-2016-63677.8Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and FWSM devices allows local users to gain pri CVE-2016-63688.6A vulnerability in the detection engine parsing of Pragmatic General Multicast (PGM) protocol packets for Cisco Firepower System Software co CVE-2016-63697.8Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain p CVE-2016-63704.3Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allow CVE-2016-63717.5Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment (HCM-F) 10.6(3) and earlier allow CVE-2016-63727.5A vulnerability in the email message and content filtering for malformed Multipurpose Internet Mail Extensions (MIME) headers of Cisco Async CVE-2016-63737.2The web-based GUI in Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote authenticated administrators to execute arbitrary OS command CVE-2016-63749.8Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP re CVE-2016-63755.3Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and 8.2.x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow remote atta CVE-2016-63766.5The Adaptive Wireless Intrusion Prevention System (wIPS) feature on Cisco Wireless LAN Controller (WLC) devices before 8.0.140.0, 8.1.x and CVE-2016-63778.1Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authenticati CVE-2016-63787.5Cisco IOS XE 3.1 through 3.17 and 16.1 through 16.2 allows remote attackers to cause a denial of service (device reload) via crafted ICMP pa