ByteOS Network

CVE Vulnerability Details :

CVE-2016-6366

PUBLISHED

More Info Official Page

Assigner-cisco

Assigner Org ID-d1c1063e-7a18-46af-9102-31f8928bc633

View Known Exploited Vulnerability (KEV) details

Published At-18 Aug, 2016 | 18:00

Updated At-12 Jan, 2026 | 20:50

▼CVE Numbering Authority (CNA)

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securityfocus.com/bid/92521	vdb-entry x_refsource_BID
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip	x_refsource_MISC
http://blogs.cisco.com/security/shadow-brokers	x_refsource_CONFIRM
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp	vendor-advisory x_refsource_CISCO
http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516	x_refsource_CONFIRM
https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html	x_refsource_MISC
https://www.exploit-db.com/exploits/40258/	exploit x_refsource_EXPLOIT-DB
http://www.securitytracker.com/id/1036637	vdb-entry x_refsource_SECTRACK

Hyperlink: http://www.securityfocus.com/bid/92521

Resource:

vdb-entry

x_refsource_BID

Hyperlink: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip

Resource:

x_refsource_MISC

Hyperlink: http://blogs.cisco.com/security/shadow-brokers

Resource:

x_refsource_CONFIRM

Hyperlink: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp

Resource:

vendor-advisory

x_refsource_CISCO

Hyperlink: http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516

Resource:

x_refsource_CONFIRM

Hyperlink: https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html

Resource:

x_refsource_MISC

Hyperlink: https://www.exploit-db.com/exploits/40258/

Resource:

exploit

x_refsource_EXPLOIT-DB

Hyperlink: http://www.securitytracker.com/id/1036637

Resource:

vdb-entry

x_refsource_SECTRACK

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/92521	vdb-entry x_refsource_BID x_transferred
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip	x_refsource_MISC x_transferred
http://blogs.cisco.com/security/shadow-brokers	x_refsource_CONFIRM x_transferred
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp	vendor-advisory x_refsource_CISCO x_transferred
http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516	x_refsource_CONFIRM x_transferred
https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html	x_refsource_MISC x_transferred
https://www.exploit-db.com/exploits/40258/	exploit x_refsource_EXPLOIT-DB x_transferred
http://www.securitytracker.com/id/1036637	vdb-entry x_refsource_SECTRACK x_transferred

Hyperlink: http://www.securityfocus.com/bid/92521

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://blogs.cisco.com/security/shadow-brokers

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp

Resource:

vendor-advisory

x_refsource_CISCO

x_transferred

Hyperlink: http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://www.exploit-db.com/exploits/40258/

Resource:

exploit

x_refsource_EXPLOIT-DB

x_transferred

Hyperlink: http://www.securitytracker.com/id/1036637

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-120	CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Type: CWE

CWE ID: CWE-120

Description: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Metrics

Version	Base score	Base severity	Vector
3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Metrics Other Info

kev

dateAdded:

2022-05-24

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6366

References

Hyperlink	Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6366	government-resource

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6366

Resource:

government-resource

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References