CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2016-08-18
Cisco ASA SNMP Buffer Overflow Remote Code Execution Vulnerability (CVE-2016-6366, EXTRABACON)
[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, 5500-X, ASAv, Firepower 9300, PIX, and FWSM devices
[Impact] Remote authenticated attackers can exploit this vulnerability to execute arbitrary code (RCE) with elevated privileges or cause a denial of service (DoS) via crafted IPv4 SNMP packets
[Mitigation] Apply official Cisco software updates immediately, restrict SNMP access using strict Access Control Lists (ACLs), and rotate SNMP community strings