CVE-2016-6366

🗓️ 18 Aug 2016 18:00:00Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 943 Views

Buffer overflow in Cisco ASA Software allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets

Reporter	Title	Published	Views	Family All 25
0day.today	Cisco ASA 8.x - 'EXTRABACON' Authentication Bypass	18 Aug 201600:00	–	zdt
Gitee	Exploit for Classic Buffer Overflow in Cisco Pix_Firewall_Software	8 Sep 202309:54	–	gitee
GithubExploit	Exploit for Classic Buffer Overflow in Cisco Pix_Firewall_Software	20 Sep 201623:19	–	githubexploit
ATTACKERKB	CVE-2016-6366	18 Aug 201600:00	–	attackerkb
Circl	CVE-2016-6366	16 Jul 202015:38	–	circl
CISA KEV Catalog	Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability	24 May 202200:00	–	cisa_kev
Cisco	Cisco Adaptive Security Appliance SNMP Remote Code Execution Vulnerability	17 Aug 201618:45	–	cisco
Tenable Nessus	Cisco ASA SNMP Packet Handling RCE (CSCva92151) (EXTRABACON)	25 Aug 201600:00	–	nessus
canvas	Immunity Canvas: CISCO_SNMP_OID	18 Aug 201618:59	–	canvas
CNVD	Cisco Adaptive Security Appliance Software Remote Code Execution Vulnerability	19 Aug 201600:00	–	cnvd

NVD

Node

cisco pix_firewall_softwareMatch-

AND

cisco pix_firewall_501Match-

cisco pix_firewall_506Match-

cisco pix_firewall_506eMatch-

cisco pix_firewall_515Match-

cisco pix_firewall_515eMatch-

cisco pix_firewall_520Match-

cisco pix_firewall_525Match-

cisco pix_firewall_535Match-

Node

cisco adaptive_security_appliance_softwareRange7.2.1–9.0.4.40

cisco adaptive_security_appliance_softwareRange9.1.1–9.1.7(9)

cisco adaptive_security_appliance_softwareRange9.2.0–9.2.4(14)

cisco adaptive_security_appliance_softwareRange9.3.0–9.3.3(10)

cisco adaptive_security_appliance_softwareRange9.4.0.115–9.4.3(8)

cisco adaptive_security_appliance_softwareRange9.5.0–9.5(3)

cisco adaptive_security_appliance_softwareRange9.6.0–9.6.1(11)

AND

cisco 7604Match-

cisco 7606-sMatch-

cisco 7609-sMatch-

cisco 7613-sMatch-

cisco asa_5500Match-

cisco asa_5500-xMatch-

cisco asa_5500_csc-ssmMatch-

cisco asa_5505Match-

cisco asa_5506-xMatch-

cisco asa_5506h-xMatch-

cisco asa_5506w-xMatch-

cisco asa_5508-xMatch-

cisco asa_5510Match-

cisco asa_5512-xMatch-

cisco asa_5515-xMatch-

cisco asa_5516-xMatch-

cisco asa_5520Match-

cisco asa_5525-xMatch-

cisco asa_5540Match-

cisco asa_5545-xMatch-

cisco asa_5550Match-

cisco asa_5555-xMatch-

cisco asa_5580Match-

cisco asa_5585-xMatch-

cisco catalyst_6500Match-

cisco catalyst_6500-eMatch-

cisco catalyst_6503-eMatch-

cisco catalyst_6504-eMatch-

cisco catalyst_6506-eMatch-

cisco catalyst_6509-eMatch-

cisco catalyst_6509-neb-aMatch-

cisco catalyst_6509-v-eMatch-

cisco catalyst_6513Match-

cisco catalyst_6513-eMatch-

Node

cisco asa_1000v_cloud_firewall_softwareMatch8.7.1

cisco asa_1000v_cloud_firewall_softwareMatch8.7.1.1

Source	Link
tools	www.tools.cisco.com/security/center/viewErp.x
blogs	www.blogs.cisco.com/security/shadow-brokers
securityfocus	www.securityfocus.com/bid/92521
securitytracker	www.securitytracker.com/id/1036637
zerosum0x0	www.zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html
github	www.github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp
exploit-db	www.exploit-db.com/exploits/40258/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

22 Apr 2026 15:42Current

8.8High risk

Vulners AI Score8.8

CVSS 28.5

CVSS 3.18.8

EPSS0.90783

SSVC