---
id: "CVE-2016-6366"
kind: "vulnerability"
aliases: ["CVE-2016-6366"]
title: "Cisco Adaptive Security Appliance (ASA): Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability"
severity: "high"
cvss: 8.8
epss: 0.87565
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "Cisco Adaptive Security Appliance (ASA)", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["asa", "cisco", "exploited", "firewall", "infrastructure", "snmp"]
not_affected_if: ["snmp-disabled"]
published_at: "2016-08-18T18:59:00+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-6366", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2016-6366", "first_seen_at": "2026-10-23T19:13:45+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2016-6366", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Cisco Adaptive Security Appliance (ASA): Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability

Cisco ASA firewall software has a buffer overflow in its SNMP code. A remote attacker can reload the device or run code on it.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Cisco Adaptive Security Appliance (ASA) affected ? fixed ?

## Fix

Apply the Cisco ASA software update per vendor instructions (CISA required action); the fixed version is unknown from these sources.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-6366
- 2026-10-23T19:13:45+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2016-6366
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2016-6366

## From the sources

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_