CVE-2016-6366

high-risk
Published 2016-08-18

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

Do I need to act?

!
91.4% chance of exploitation in next 30 days
EPSS score — higher than 9% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
!
1 public exploit available
40258
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.8/10 High
NETWORK / LOW complexity

Affected Products (4)

Affected Vendors

Cisco

References (17)

Exploit http://blogs.cisco.com/security/shadow-brokers
Vendor Advisory http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20...
Vendor Advisory http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516
Broken Link http://www.securityfocus.com/bid/92521
Broken Link http://www.securitytracker.com/id/1036637
Broken Link https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sp...
Third Party Advisory https://www.exploit-db.com/exploits/40258/
Exploit https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html
Exploit http://blogs.cisco.com/security/shadow-brokers
Vendor Advisory http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20...
Vendor Advisory http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516
Broken Link http://www.securityfocus.com/bid/92521
Broken Link http://www.securitytracker.com/id/1036637
Broken Link https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sp...
Third Party Advisory https://www.exploit-db.com/exploits/40258/
Exploit https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-...
67
/ 100
high-risk
Severity 30/34 · Critical
Exploitability 27/34 · High
Exposure 10/34 · Low