Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2016-6366
HistoryAug 18, 2016 - 6:59 p.m.

CVE-2016-6366

2016-08-1818:59:00
CWE-119
[email protected]
web.nvd.nist.gov
832
In Wild
4
cisco
asa
buffer overflow
remote code execution
ipv4
snmp
vulnerability
cve-2016-6366

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

CPENameOperatorVersion
cisco:firepower_threat_defense_softwarecisco firepower threat defense softwareeq6.0.0
cisco:firepower_threat_defense_softwarecisco firepower threat defense softwareeq6.0.1
cisco:firepower_services_software_for_asacisco firepower services software for asaeq5.4.1
cisco:firepower_services_software_for_asacisco firepower services software for asaeq5.4.0
cisco:firepower_services_software_for_asacisco firepower services software for asaeq5.4.1.5
cisco:firepower_services_software_for_asacisco firepower services software for asaeq5.4.1.3
cisco:firepower_services_software_for_asacisco firepower services software for asaeq5.4.1.1
cisco:firepower_services_software_for_asacisco firepower services software for asaeq5.4.1.6
cisco:firepower_services_software_for_asacisco firepower services software for asaeq5.4.1.4
cisco:firepower_services_software_for_asacisco firepower services software for asaeq5.4.1.7
Rows per page:
1-10 of 3051

Social References

More

Related

threatpost 2
attackerkb 1
nessus 1
checkpoint_advisories 1
openvas 1
canvas 1
cisa_kev 1
zdt 1
prion 1
metasploit 1
cisco 1
thn 2
threatpost
threatpost
Leaked ShadowBrokers Attack Upgraded to Target Current Versions of Cisco ASA
2016-08-24 13:04:23
Cisco Begins Patching Equation Group ASA Zero Day
2016-08-24 17:53:13
attackerkb
attackerkb
CVE-2016-6366
2016-08-18 00:00:00
nessus
nessus
Cisco ASA SNMP Packet Handling RCE (CSCva92151) (EXTRABACON)
2016-08-25 00:00:00
checkpoint_advisories
checkpoint_advisories
Cisco ASA Disable Password Remote Code Execution (CVE-2016-6366)
2016-08-18 00:00:00
openvas
openvas
Cisco Adaptive Security Appliance SNMP Remote Code Execution Vulnerability (cisco-sa-20160817-asa-snmp)
2016-08-18 00:00:00
canvas
canvas
Immunity Canvas: CISCO_SNMP_OID
2016-08-18 18:59:00
cisa_kev
cisa_kev
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
2022-05-24 00:00:00
zdt
zdt
Cisco ASA 8.x - 'EXTRABACON' Authentication Bypass
2016-08-18 00:00:00
prion
prion
Buffer overflow
2016-08-18 18:59:00
metasploit
metasploit
Cisco ASA Authentication Bypass (EXTRABACON)
2020-06-22 10:11:11
cisco
cisco
Cisco Adaptive Security Appliance SNMP Remote Code Execution Vulnerability
2016-08-17 18:45:00
thn
thn
Leaked Exploits are Legit and Belong to NSA: Cisco, Fortinet and Snowden Docs Confirm
2016-08-19 22:30:00
Cisco finds new Zero-Day Exploit linked to NSA Hackers
2016-09-19 20:55:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

8.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

0.974 High

EPSS

Percentile

99.9%

JSON
Related for CVE-2016-6366
threatpost2attackerkb1nessus1checkpoint_advisories1openvas1canvas1cisa_kev1zdt1prion1metasploit1cisco1thn2