CVE-2016-6366

HIGH

8.8

CVSS Score

Published: August 18, 2016 at 06:00 PM UTC

Updated: June 17, 2026 at 12:50 AM UTC

45 products affected across 1 vendorAdaptive Security AppliancePix Firewall SoftwareASA 1000V Cloud Firewall Software

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploitation

CISA KEV

Exploit prediction

EPSS 88%

SSVC

Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score87.6%

EPSS (Exploit Prediction Scoring System) estimates a 87.6% chance this CVE is exploited in the wild within the next 30 days — higher than 100% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause a reload of the affected system or to remotely execute code.

Required Action

Apply updates per vendor instructions.

Ransomware Use

Unknown

Added to KEV

May 24, 2022

Remediation Due

Jun 14, 2022

1596 days overdue

Notes

https://nvd.nist.gov/vuln/detail/CVE-2016-6366

Description

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Adaptive Security Appliance · Cisco

95%

7.2.1 ≤ v < 9.0.4.409.1.1 ≤ v < 9.1.7(9)9.2.0 ≤ v < 9.2.4(14)9.3.0 ≤ v < 9.3.3(10)9.4.0.115 ≤ v < 9.4.3(8)9.5.0 ≤ v ≤ 9.5(3)9.6.0 ≤ v < 9.6.1(11)

Affected range stops below 9.0.4.40, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.1.7(9), so it looks safe — our inference, not a vendor statement

Affected range stops below 9.2.4(14), so it looks safe — our inference, not a vendor statement

Affected range stops below 9.3.3(10), so it looks safe — our inference, not a vendor statement

Affected range stops below 9.4.3(8), so it looks safe — our inference, not a vendor statement

Affected range stops below 9.6.1(11), so it looks safe — our inference, not a vendor statement

cisco-7604 (environment) · cisco-7606-s (environment) · cisco-7609-s (environment) · cisco-7613-s (environment) · cisco-asa-5500 (environment) · cisco-asa-5500-csc-ssm (environment) · cisco-asa-5500-x (environment) · cisco-asa-5505 (environment) · cisco-asa-5506-x (environment) · cisco-asa-5506h-x (environment) · cisco-asa-5506w-x (environment) · cisco-asa-5508-x (environment) · cisco-asa-5510 (environment) · cisco-asa-5512-x (environment) · cisco-asa-5515-x (environment) · cisco-asa-5516-x (environment) · cisco-asa-5520 (environment) · cisco-asa-5525-x (environment) · cisco-asa-5540 (environment) · cisco-asa-5545-x (environment) · cisco-asa-5550 (environment) · cisco-asa-5555-x (environment) · cisco-asa-5580 (environment) · cisco-asa-5585-x (environment) · cisco-catalyst-6500 (environment) · cisco-catalyst-6500-e (environment) · cisco-catalyst-6503-e (environment) · cisco-catalyst-6504-e (environment) · cisco-catalyst-6506-e (environment) · cisco-catalyst-6509-e (environment) · cisco-catalyst-6509-neb-a (environment) · cisco-catalyst-6509-v-e (environment) · cisco-catalyst-6513 (environment) · cisco-catalyst-6513-e (environment)

ASA 1000V Cloud Firewall Software · Cisco

95%

8.7.1 8.7.1.1

Pix Firewall Software · Cisco

95%

All versions

cisco-pix-firewall-501 (same device) · cisco-pix-firewall-506 (same device) · cisco-pix-firewall-506e (same device) · cisco-pix-firewall-515 (same device) · cisco-pix-firewall-515e (same device) · cisco-pix-firewall-520 (same device) · cisco-pix-firewall-525 (same device) · cisco-pix-firewall-535 (same device)

7604 · Ciscodevice

80%

All versions

7606-S · Ciscodevice

80%

All versions

7609-S · Ciscodevice

80%

All versions

7613-S · Ciscodevice

80%

All versions