CVE-2016-6366

🗓️ 18 Aug 2016 18:59:00Reported by [email protected]Type

Buffer overflow in Cisco ASA Software allows arbitrary code execution via crafted IPv4 SNMP packet

Reporter	Title	Published	Views	Family All 27
zdt	Cisco ASA 8.x - 'EXTRABACON' Authentication Bypass	18 Aug 201600:00	–	zdt
Gitee	Exploit for Classic Buffer Overflow in Cisco Pix_Firewall_Software	8 Sep 202309:54	–	gitee
GithubExploit	Exploit for Classic Buffer Overflow in Cisco Pix_Firewall_Software	20 Sep 201623:19	–	githubexploit
ATTACKERKB	CVE-2016-6366	18 Aug 201600:00	–	attackerkb
BDU FSTEC	The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software allows a perpetrator to trigger a service failure or execute arbitrary code.	23 Aug 201600:00	–	bdu_fstec
Circl	CVE-2016-6366	16 Jul 202015:38	–	circl
CISA KEV Catalog	Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability	24 May 202200:00	–	cisa_kev
Cisco	Cisco Adaptive Security Appliance SNMP Remote Code Execution Vulnerability	17 Aug 201618:45	–	cisco
Tenable Nessus	Cisco ASA SNMP Packet Handling RCE (CSCva92151) (EXTRABACON)	25 Aug 201600:00	–	nessus
canvas	Immunity Canvas: CISCO_SNMP_OID	18 Aug 201618:59	–	canvas

NVD

Node

AND

cisco pix_firewall_softwareMatch-

cisco pix_firewall_501Match-

cisco pix_firewall_506Match-

cisco pix_firewall_506eMatch-

cisco pix_firewall_515Match-

cisco pix_firewall_515eMatch-

cisco pix_firewall_520Match-

cisco pix_firewall_525Match-

cisco pix_firewall_535Match-

Node

AND

cisco adaptive_security_appliance_softwareRange7.2.1–9.0.4.40

cisco adaptive_security_appliance_softwareRange9.1.1–9.1.7(9)

cisco adaptive_security_appliance_softwareRange9.2.0–9.2.4(14)

cisco adaptive_security_appliance_softwareRange9.3.0–9.3.3(10)

cisco adaptive_security_appliance_softwareRange9.4.0.115–9.4.3(8)

cisco adaptive_security_appliance_softwareRange9.5.0–9.5(3)

cisco adaptive_security_appliance_softwareRange9.6.0–9.6.1(11)

cisco 7604Match-

cisco 7606-sMatch-

cisco 7609-sMatch-

cisco 7613-sMatch-

cisco asa_5500Match-

cisco asa_5500-xMatch-

cisco asa_5500_csc-ssmMatch-

cisco asa_5505Match-

cisco asa_5506-xMatch-

cisco asa_5506h-xMatch-

cisco asa_5506w-xMatch-

cisco asa_5508-xMatch-

cisco asa_5510Match-

cisco asa_5512-xMatch-

cisco asa_5515-xMatch-

cisco asa_5516-xMatch-

cisco asa_5520Match-

cisco asa_5525-xMatch-

cisco asa_5540Match-

cisco asa_5545-xMatch-

cisco asa_5550Match-

cisco asa_5555-xMatch-

cisco asa_5580Match-

cisco asa_5585-xMatch-

cisco catalyst_6500Match-

cisco catalyst_6500-eMatch-

cisco catalyst_6503-eMatch-

cisco catalyst_6504-eMatch-

cisco catalyst_6506-eMatch-

cisco catalyst_6509-eMatch-

cisco catalyst_6509-neb-aMatch-

cisco catalyst_6509-v-eMatch-

cisco catalyst_6513Match-

cisco catalyst_6513-eMatch-

Node

cisco asa_1000v_cloud_firewall_softwareMatch8.7.1

cisco asa_1000v_cloud_firewall_softwareMatch8.7.1.1

Source	Link
github	www.github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip
zerosum0x0	www.zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html
blogs	www.blogs.cisco.com/security/shadow-brokers
tools	www.tools.cisco.com/security/center/viewErp.x
securitytracker	www.securitytracker.com/id/1036637
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp
securityfocus	www.securityfocus.com/bid/92521
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
exploit-db	www.exploit-db.com/exploits/40258/

17 Jun 2026 00:50Current

9High risk

Vulners AI Score9

CVSS 28.5

CVSS 3.18.8

EPSS0.87565

CWE-120