CVE-2016-6366: cisco pix firewall software +2 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2016-6366

CVSS 8.8 · High KEV · sudah dieksploitasi EPSS 87,6%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada cisco pix firewall software, cisco adaptive security appliance software +1 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD. Masuk katalog KEV CISA pada 24 Mei 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

Rincian

Terbit di NVD: 18 Agustus 2016
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
EPSS (30 hari): 87,6% peluang dieksploitasi; lebih tinggi dari 99,7% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
Masuk KEV: 24 Mei 2022
Tenggat CISA: 14 Juni 2022 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: Apply updates per vendor instructions.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
cisco	pix firewall software	Semua versi
cisco	adaptive security appliance software	Versi 7.2.1 hingga sebelum 9.0.4.40
cisco	adaptive security appliance software	Versi 9.1.1 hingga sebelum 9.1.7\(9\)
cisco	adaptive security appliance software	Versi 9.2.0 hingga sebelum 9.2.4\(14\)
cisco	adaptive security appliance software	Versi 9.3.0 hingga sebelum 9.3.3\(10\)
cisco	adaptive security appliance software	Versi 9.4.0.115 hingga sebelum 9.4.3\(8\)
cisco	adaptive security appliance software	Versi 9.5.0 hingga 9.5\(3\)
cisco	adaptive security appliance software	Versi 9.6.0 hingga sebelum 9.6.1\(11\)
cisco	asa 1000v cloud firewall software	Versi 8.7.1
cisco	asa 1000v cloud firewall software	Versi 8.7.1.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

http://blogs.cisco.com/security/shadow-brokers exploit · press/media coverage · advisory vendor
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp advisory vendor
http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516 advisory vendor
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-6366 pemerintah AS
http://www.securityfocus.com/bid/92521 broken link · not applicable · advisory pihak ketiga · vdb entry
http://www.securitytracker.com/id/1036637 broken link · advisory pihak ketiga · vdb entry
https://www.exploit-db.com/exploits/40258/ advisory pihak ketiga · vdb entry
https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip broken link · exploit
https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html exploit · deskripsi teknis

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.