PT-2016-2534 · Cisco · Asa 5500+8

Zerosum0X0 · Published 2016-08-15 · Updated 2025-01-27 · CVE-2016-6366

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance (ASA) Software versions through 9.4.2.3

Description The issue is caused by a buffer overflow in the Simple Network Management Protocol (SNMP) code, allowing remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets. This can also cause a reload of the affected system. The vulnerability affects various Cisco devices, including ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM.

Recommendations For versions through 9.4.2.3, consider disabling SNMP or restricting access to the SNMP service until a patch is available. As a temporary workaround, restrict access to the vulnerable devices to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

BDU:2016-01925

CVE-2016-6366

Affected Products

Asa 1000V

Asa 5500

Asa 5500-X

Asa Services Module

Asav

Cisco Asa

Fwsm

Firepower 9300 Asa Security Module

Pix

References · 19

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/networking/cisco_asa_extrabacon.rb · Exploit
• 🔥 https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip · Exploit
• 🔥 https://github.com/RiskSense-Ops/CVE-2016-6366 · Exploit
• 🔥 https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html · Exploit
• 🔥 https://exploit-db.com/exploits/40258 · Exploit
• 🔥 http://blogs.cisco.com/security/shadow-brokers · Exploit
• https://bdu.fstec.ru/vul/2016-01925 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp · Vendor Advisory
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp · Vendor Advisory
• http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6366 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6366 · Security Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6366 · Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp · Note
• http://securitytracker.com/id/1036637 · Note