PT-2016-6906 · Cisco · Cisco Asa

Published 2016-10-19 · Updated 2023-08-15 · CVE-2016-6432

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco ASA Software versions prior to 9.6(2.1)

Description A buffer overflow in the Identity Firewall feature could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability can be exploited by sending a crafted NetBIOS packet in response to a NetBIOS probe sent by the ASA software, allowing the attacker to execute arbitrary code and obtain full control of the system or cause a reload of the affected system. This issue affects systems configured in routed and transparent firewall mode and in single or multiple context mode, and can be triggered by IPv4 traffic.

Recommendations For versions prior to 9.6(2.1), update to version 9.6(2.1) or later to resolve the issue. As a temporary workaround, consider restricting access to the Identity Firewall feature until a patch is available. Avoid using the affected feature in production environments until the issue is resolved.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-6432

Affected Products

Cisco Asa

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161019-asa-idfw · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-6432 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6432 · Security Note
• http://securityfocus.com/bid/93784 · Note
• http://securitytracker.com/id/1037059 · Note