QwikSec

Security Database

CVE

CWE

Training

CVE-2016-6366

Published: Aug 18, 2016

Modified: Jan 12, 2026

PUBLISHED

Description

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip

x_refsource_MISC

http://blogs.cisco.com/security/shadow-brokers

x_refsource_CONFIRM

20160817 Cisco Adaptive Security Appliance SNMP Remote Code Execution Vulnerability

vendor-advisory

x_refsource_CISCO

http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516

x_refsource_CONFIRM

https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html

x_refsource_MISC

exploit

x_refsource_EXPLOIT-DB

vdb-entry

x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.