{"id":"CVE-2016-6366","kind":"vulnerability","aliases":["CVE-2016-6366"],"related":[],"title":"Cisco Adaptive Security Appliance (ASA): Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability","description":"Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.","summary":"Cisco ASA firewall software has a buffer overflow in its SNMP code. A remote attacker can reload the device or run code on it.","severity":"high","cvss":8.8,"epss":0.87565,"exploited":true,"exploited_at":"2022-05-24T00:00:00+00:00","products":[{"name":"Cisco Adaptive Security Appliance (ASA)","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["asa","cisco","exploited","firewall","infrastructure","snmp"],"not_affected_if":["snmp-disabled"],"how_to_check":null,"fix":"Apply the Cisco ASA software update per vendor instructions (CISA required action); the fixed version is unknown from these sources.","status":"open","published_at":"2016-08-18T18:59:00+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:15:51+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-23T21:15:51Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Cisco ASA software update per vendor instructions (CISA required action); the fixed version is unknown from these sources.","reach":"network","impact":"high","summary":"Cisco ASA firewall software has a buffer overflow in its SNMP code. A remote attacker can reload the device or run code on it.","category":"infrastructure","who_cares":["cisco","asa","firewall","snmp"],"confidence":0.7,"needs_auth":"unknown","worst_case":"Remote attacker executes code on the firewall or forces a reload","analyst_note":"Find the Cisco advisory for CVE-2016-6366 to get affected and fixed ASA versions and whether SNMP must be enabled for exposure.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["snmp-disabled"],"user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000449,"input_tokens":2885,"output_tokens":321,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2016':16A,19A '-6366':17A,20A '1000v':75C '5500':67C,69C '9.4.2.3':64C '9300':78C 'adapt':2A,7A,58C 'adaptive':22A 'aka':99C 'allow':86C 'applianc':4A,9A,60C 'appliance':24A 'arbitrari':92C 'asa':5A,10A,25A,26B,33B,61C,66C,68C,71C,74C,79C 'asav':76C 'attack':46B 'authent':88C 'buffer':12A,38B,54C 'bug':100C 'cisco':1A,6A,21A,27B,32B,57C 'code':43B,53B,93C 'craft':95C 'cscva92151':102C 'cve':15A,18A 'devic':50B,85C 'execut':91C 'exploit':28B 'extrabacon':104C 'firepow':77C 'firewal':29B,34B 'fwsm':84C 'id':101C 'infrastructur':30B 'ipv4':96C 'modul':73C,81C 'overflow':13A,39B,55C 'packet':98C 'pix':82C 'reload':48B 'remot':45B,87C 'run':52B 'secur':3A,8A,59C,80C 'security':23A 'servic':72C 'snmp':11A,31B,42B,97C 'softwar':35B,62C 'user':89C 'via':94C 'vulner':14A 'x':70C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2016-08-18T18:59:00+00:00","kev":{"dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2016-6366","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-6366","severity":null,"published_at":"2022-05-24T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T10:39:06+00:00","note":null},{"source":"epss","external_id":"CVE-2016-6366","url":"https://api.first.org/data/v1/epss?cve=CVE-2016-6366","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2016-6366","url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6366","severity":null,"published_at":"2016-08-18T18:59:00+00:00","modified_at":"2026-06-17T00:50:54+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}