Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.5
CVSSv2

CVE-2016-6366

Published: 18/08/2016 Updated: 15/08/2023
CVSS v2 Base Score: 8.5 | Impact Score: 10 | Exploitability Score: 6.8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 857
Vector: AV:N/AC:M/Au:S/C:C/I:C/A:C
Subscribe to Firepower Threat Defense Software

Vulnerability Summary

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software up to and including 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco firepower threat defense software 6.0.0

cisco firepower threat defense software 6.0.1

cisco firepower services software for asa 5.4.1

cisco firepower services software for asa 5.4.0

cisco firepower services software for asa 5.4.1.5

cisco firepower services software for asa 5.4.1.3

cisco firepower services software for asa 5.4.1.1

cisco firepower services software for asa 5.4.1.6

cisco firepower services software for asa 5.4.1.4

cisco firepower services software for asa 5.4.1.7

cisco firepower services software for asa 5.4.1.2

cisco pix firewall 525_6.3

cisco pix firewall 515_base

cisco pix firewall 525_base

cisco pix firewall base

cisco pix firewall 520_base

cisco pix firewall 535_base

cisco pix firewall 501_base

cisco pix firewall 515e_base

cisco pix firewall 506_base

cisco adaptive security appliance software 9.3.2

cisco adaptive security appliance software 9.1.1.4

cisco adaptive security appliance software 9.1.4

cisco adaptive security appliance software 8.6.1.12

cisco adaptive security appliance software 9.2.2.7

cisco adaptive security appliance software 9.1.5.21

cisco adaptive security appliance software 9.1.3

cisco adaptive security appliance software 9.1.2

cisco adaptive security appliance software 9.2.3

cisco adaptive security appliance software 9.3.1.1

cisco adaptive security appliance software 9.1.1

cisco adaptive security appliance software 9.2.2.8

cisco adaptive security appliance software 9.3.1

cisco adaptive security appliance software 9.1.2.8

cisco adaptive security appliance software 9.1.5.15

cisco adaptive security appliance software 9.1.5.10

cisco adaptive security appliance software 9.2.1

cisco adaptive security appliance software 9.3.2.2

cisco adaptive security appliance software 9.1.5

cisco adaptive security appliance software 9.2.2.4

cisco adaptive security appliance software 9.1.5.12

cisco adaptive security appliance software 9.1.3.2

cisco adaptive security appliance software 9.1.4.5

cisco adaptive security appliance software 9.2.2

cisco adaptive security appliance software 9.3.3.2

cisco adaptive security appliance software 7.0.7.1

cisco adaptive security appliance software 9.1.6.6

cisco adaptive security appliance software 7.0.7.9

cisco adaptive security appliance software 7.0.7.12

cisco adaptive security appliance software 9.1.6.1

cisco adaptive security appliance software 9.2\\(3.1\\)

cisco adaptive security appliance software 9.3\\(2.100\\)

cisco adaptive security appliance software 7.0.6.4

cisco adaptive security appliance software 7.0.8.13

cisco adaptive security appliance software 7.0.3

cisco adaptive security appliance software 9.2.4.2

cisco adaptive security appliance software 7.0.8.2

cisco adaptive security appliance software 7.0.7.4

cisco adaptive security appliance software 9.4.2.3

cisco adaptive security appliance software 9.2\\(0.104\\)

cisco adaptive security appliance software 9.4.1.2

cisco adaptive security appliance software 7.0.4

cisco adaptive security appliance software 7.0.1

cisco adaptive security appliance software 9.2\\(0.0\\)

cisco adaptive security appliance software 7.0.7

cisco adaptive security appliance software 7.0.2

cisco adaptive security appliance software 7.0.1.4

cisco adaptive security appliance software 9.3\\(1.105\\)

cisco adaptive security appliance software 9.1.6

cisco adaptive security appliance software 9.3.3

cisco adaptive security appliance software 9.1.6.10

cisco adaptive security appliance software 9.3.3.5

cisco adaptive security appliance software 9.2.4

cisco adaptive security appliance software 9.1.6.4

cisco adaptive security appliance software 7.0.6

cisco adaptive security appliance software 9.2.3.3

cisco adaptive security appliance software 9.4.2

cisco adaptive security appliance software 7.0.6.8

cisco adaptive security appliance software 7.0.8.8

cisco adaptive security appliance software 9.2.3.4

cisco adaptive security appliance software 9.3.3.1

cisco adaptive security appliance software 7.0.6.18

cisco adaptive security appliance software 9.4.1.5

cisco adaptive security appliance software 7.0.6.32

cisco adaptive security appliance software 9.4.1.3

cisco adaptive security appliance software 7.0.8.12

cisco adaptive security appliance software 7.0.5

cisco adaptive security appliance software 9.4.1

cisco adaptive security appliance software 7.0.4.2

cisco adaptive security appliance software 9.1.6.8

cisco adaptive security appliance software 9.3\\(2.243\\)

cisco adaptive security appliance software 9.3.5

cisco adaptive security appliance software 9.3\\(1.50\\)

cisco adaptive security appliance software 9.4.0.115

cisco adaptive security appliance software 7.0.6.29

cisco adaptive security appliance software 9.2.4.4

cisco adaptive security appliance software 7.0.5.12

cisco adaptive security appliance software 7.0.8

cisco adaptive security appliance software 7.0.6.22

cisco adaptive security appliance software 9.4.1.1

cisco adaptive security appliance software 7.0.6.26

cisco adaptive security appliance software 9.3.3.6

cisco adaptive security appliance software 7.2.4.30

cisco adaptive security appliance software 7.1.2.24

cisco adaptive security appliance software 7.2.4.18

cisco adaptive security appliance software 7.1.2.81

cisco adaptive security appliance software 7.2.3.12

cisco adaptive security appliance software 7.2.5.7

cisco adaptive security appliance software 7.2.1.24

cisco adaptive security appliance software 7.2.3.16

cisco adaptive security appliance software 7.2.1.13

cisco adaptive security appliance software 7.2.2.10

cisco adaptive security appliance software 7.1.2.16

cisco adaptive security appliance software 7.1.2.28

cisco adaptive security appliance software 7.1.2.20

cisco adaptive security appliance software 7.2.4.33

cisco adaptive security appliance software 7.2.2.22

cisco adaptive security appliance software 7.1.2.64

cisco adaptive security appliance software 7.2.5.12

cisco adaptive security appliance software 7.2.3

cisco adaptive security appliance software 7.2.5.16

cisco adaptive security appliance software 7.2.1.19

cisco adaptive security appliance software 7.2.4.27

cisco adaptive security appliance software 7.1.2.46

cisco adaptive security appliance software 7.2.2.14

cisco adaptive security appliance software 7.2.2.18

cisco adaptive security appliance software 7.2.5.4

cisco adaptive security appliance software 7.1.2.61

cisco adaptive security appliance software 7.2.3.1

cisco adaptive security appliance software 7.2.5.10

cisco adaptive security appliance software 7.2.1.9

cisco adaptive security appliance software 7.1.2.42

cisco adaptive security appliance software 7.2.2.6

cisco adaptive security appliance software 7.2.4.9

cisco adaptive security appliance software 7.2.2

cisco adaptive security appliance software 7.2.2.34

cisco adaptive security appliance software 7.1.2.49

cisco adaptive security appliance software 7.2.5.2

cisco adaptive security appliance software 7.1.2.72

cisco adaptive security appliance software 7.1.2.53

cisco adaptive security appliance software 7.2.4.25

cisco adaptive security appliance software 7.2.4.6

cisco adaptive security appliance software 7.2.2.19

cisco adaptive security appliance software 7.2.4

cisco adaptive security appliance software 7.1.2.38

cisco adaptive security appliance software 7.2.5

cisco adaptive security appliance software 7.2.5.8

cisco adaptive security appliance software 7.1.2

cisco adaptive security appliance software 7.2.1

cisco adaptive security appliance software 8.3.2.40

cisco adaptive security appliance software 8.3.1

cisco adaptive security appliance software 8.0.4.28

cisco adaptive security appliance software 8.2.2

cisco adaptive security appliance software 8.3.1.1

cisco adaptive security appliance software 8.0.1.2

cisco adaptive security appliance software 8.0.5.27

cisco adaptive security appliance software 8.0.4.33

cisco adaptive security appliance software 8.3.1.6

cisco adaptive security appliance software 8.2.5.40

cisco adaptive security appliance software 8.1.2.49

cisco adaptive security appliance software 8.2.1

cisco adaptive security appliance software 8.2.2.12

cisco adaptive security appliance software 8.0.4.3

cisco adaptive security appliance software 8.2.5.22

cisco adaptive security appliance software 8.2.5.33

cisco adaptive security appliance software 8.2.5.41

cisco adaptive security appliance software 8.2.4.4

cisco adaptive security appliance software 8.2.2.10

cisco adaptive security appliance software 8.0.5.23

cisco adaptive security appliance software 8.3.2.37

cisco adaptive security appliance software 8.1.1

cisco adaptive security appliance software 8.3.2.39

cisco adaptive security appliance software 8.0.4.25

cisco adaptive security appliance software 8.0.4.16

cisco adaptive security appliance software 8.2.5.26

cisco adaptive security appliance software 8.0.5.20

cisco adaptive security appliance software 8.0.4.9

cisco adaptive security appliance software 8.1.2

cisco adaptive security appliance software 8.3.2

cisco adaptive security appliance software 8.3.2.33

cisco adaptive security appliance software 8.2.4

cisco adaptive security appliance software 8.1.2.24

cisco adaptive security appliance software 8.2.5.57

cisco adaptive security appliance software 8.3.2.41

cisco adaptive security appliance software 8.1.2.23

cisco adaptive security appliance software 8.2.4.1

cisco adaptive security appliance software 8.2.3

cisco adaptive security appliance software 8.3.1.4

cisco adaptive security appliance software 8.3.2.44

cisco adaptive security appliance software 8.0.5.28

cisco adaptive security appliance software 8.0.4.31

cisco adaptive security appliance software 8.3.2.34

cisco adaptive security appliance software 8.0.4.23

cisco adaptive security appliance software 8.2.5.50

cisco adaptive security appliance software 8.0.2

cisco adaptive security appliance software 8.2.5

cisco adaptive security appliance software 8.1.2.19

cisco adaptive security appliance software 8.3.2.13

cisco adaptive security appliance software 8.2.5.13

cisco adaptive security appliance software 8.3.2.23

cisco adaptive security appliance software 8.1.2.55

cisco adaptive security appliance software 8.2.5.52

cisco adaptive security appliance software 8.0.2.11

cisco adaptive security appliance software 8.3.2.31

cisco adaptive security appliance software 8.1.2.16

cisco adaptive security appliance software 8.2.5.55

cisco adaptive security appliance software 8.1.2.56

cisco adaptive security appliance software 8.3.2.4

cisco adaptive security appliance software 8.0.3.6

cisco adaptive security appliance software 8.1.1.6

cisco adaptive security appliance software 8.0.4.32

cisco adaptive security appliance software 8.0.5.31

cisco adaptive security appliance software 8.1.0.104

cisco adaptive security appliance software 8.0.5

cisco adaptive security appliance software 8.2.2.17

cisco adaptive security appliance software 8.2.2.9

cisco adaptive security appliance software 8.0.4

cisco adaptive security appliance software 8.1.2.13

cisco adaptive security appliance software 8.0.3.19

cisco adaptive security appliance software 8.2.2.16

cisco adaptive security appliance software 8.0.3

cisco adaptive security appliance software 8.0.2.15

cisco adaptive security appliance software 8.3.2.25

cisco adaptive security appliance software 8.2.1.11

cisco adaptive security appliance software 8.2.5.46

cisco adaptive security appliance software 8.0.5.25

cisco adaptive security appliance software 8.2.5.48

cisco adaptive security appliance software 8.1.2.50

cisco adaptive security appliance software 8.1.2.15

cisco adaptive security appliance software 8.0.3.12

cisco adaptive security appliance software 8.2.0.45

cisco adaptive security appliance software 8.4.3

cisco adaptive security appliance software 8.4.4.9

cisco adaptive security appliance software 8.4.4

cisco adaptive security appliance software 8.4.0

cisco adaptive security appliance software 8.4.1.3

cisco adaptive security appliance software 8.4.7.29

cisco adaptive security appliance software 8.4.1.11

cisco adaptive security appliance software 8.4.7.22

cisco adaptive security appliance software 8.4.2.1

cisco adaptive security appliance software 8.4.4.1

cisco adaptive security appliance software 8.4.7

cisco adaptive security appliance software 8.4.7.26

cisco adaptive security appliance software 8.4.5

cisco adaptive security appliance software 8.4.7.15

cisco adaptive security appliance software 8.4.4.5

cisco adaptive security appliance software 8.4.3.8

cisco adaptive security appliance software 8.4.7.23

cisco adaptive security appliance software 8.4.3.9

cisco adaptive security appliance software 8.4.6

cisco adaptive security appliance software 8.4.5.6

cisco adaptive security appliance software 8.4.7.3

cisco adaptive security appliance software 8.4.4.3

cisco adaptive security appliance software 8.4.2.8

cisco adaptive security appliance software 8.4.1

cisco adaptive security appliance software 8.4.7.28

cisco adaptive security appliance software 8.4.2

cisco adaptive security appliance software 8.6.1

cisco adaptive security appliance software 8.5.1.18

cisco adaptive security appliance software 8.5.1.14

cisco adaptive security appliance software 8.5.1.19

cisco adaptive security appliance software 8.6.1.13

cisco adaptive security appliance software 8.6.1.2

cisco adaptive security appliance software 8.5.1.7

cisco adaptive security appliance software 8.6.1.14

cisco adaptive security appliance software 8.5.1.24

cisco adaptive security appliance software 8.6.1.17

cisco adaptive security appliance software 8.5.1.21

cisco adaptive security appliance software 8.6.1.10

cisco adaptive security appliance software 8.5.1.1

cisco adaptive security appliance software 8.6.1.1

cisco adaptive security appliance software 8.5.1

cisco adaptive security appliance software 8.5.1.6

cisco adaptive security appliance software 8.6.1.5

cisco adaptive security appliance software 8.5.1.17

cisco adaptive security appliance software 8.7.1.4

cisco adaptive security appliance software 8.7.1.16

cisco adaptive security appliance software 9.0.4.37

cisco adaptive security appliance software 9.0.4

cisco adaptive security appliance software 9.0.4.5

cisco adaptive security appliance software 8.7.1.7

cisco adaptive security appliance software 9.0.4.7

cisco adaptive security appliance software 9.0.4.26

cisco adaptive security appliance software 9.0.3.8

cisco adaptive security appliance software 9.0.4.35

cisco adaptive security appliance software 8.7.1.17

cisco adaptive security appliance software 9.0.4.17

cisco adaptive security appliance software 8.7.1

cisco adaptive security appliance software 9.0.3.6

cisco adaptive security appliance software 8.7.1.8

cisco adaptive security appliance software 9.0.2.10

cisco adaptive security appliance software 9.0.1

cisco adaptive security appliance software 9.0.4.33

cisco adaptive security appliance software 9.0.4.24

cisco adaptive security appliance software 8.7.1.11

cisco adaptive security appliance software 9.0.2

cisco adaptive security appliance software 9.0.4.20

cisco adaptive security appliance software 9.0.4.29

cisco adaptive security appliance software 8.7.1.3

cisco adaptive security appliance software 8.7.1.1

cisco adaptive security appliance software 9.0.3

cisco adaptive security appliance software 8.7.1.13

cisco adaptive security appliance software 9.0.4.1

cisco asa 1000v cloud firewall software 8.7.1.1

cisco asa 1000v cloud firewall software 8.7.1

Vendor Advisories

Cisco: Cisco Adaptive Security Appliance SNMP Remote Code Execution Vulnerability
A vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco Adaptive Security Appliance (ASA) Software could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code The vulnerability is due to a buffer overflow in the affected code area The vulnerability affects all versions ...

Exploits

Exploit DB: Cisco ASA 8.x - 'EXTRABACON' Authentication Bypass
# Exploit Title: Cisco ASA 8X Authentication Bypass # Date: 17-08-2016 # Exploit Author: Equation Group # Vendor Homepage: Cisco # Software Link: Cisco # Version: Cisco ASA 8X # Tested on: Cisco ASA 842 # CVE : Not sure Requirements: * SNMP read (public) string * Access to SNMP service * SSH port accessible Full Exploit: githubcom/ ...

Github Repositories

https://github.com/RoyeeW/pentest-wiki

Authors: < nixawk >, < m1guelpf >, < binarymist > is a free online security knowledge library for pentesters / researchers If you have a good idea, please share it with others Contents Network Analysis IP Whois DNS Identify Live Hosts IDS/IPS Identification Web Application Web Application Fingerprint CMS Identification

https://github.com/zerosum0x0-archive/archive

About An archive of created past projects No more tixes, no more fixes Beware of fakes! Signed with PGP key at keybaseio/zerosum0x0 Inventory CVE-2016-6366: improvements to the EXTRABACON exploit CVE-2019-0708: Scanner/exploit PoC for BlueKeep RDP RCE vuln defcon-25-workshop: Windows Post-Exploitation / Malware Forward Engineering DEF CON 25 Workshop FPG: Flying Pro

https://github.com/erSubhashThapa/pentestwiki

Authors is a free online security knowledge library for pentesters / researchers If you have a good idea, please share it with others Contents Network Analysis IP Whois DNS Identify Live Hosts IDS/IPS Identification Web Application Web Application Fingerprint CMS Identification Open Source Analysis IDS/IPS Identification OSINT GHDB People Pictures Media Comp

https://github.com/RiskSense-Ops/CVE-2016-6366

Public repository for improvements to the EXTRABACON exploit

CVE-2016-6366 Public repository for improvements to the EXTRABACON exploit, a remote code execution for Cisco ASA written by the Equation Group (NSA) and leaked by the Shadow Brokers There is improved shellcode, a LINA offset finder script, a Metasploit module, and extrabacon-20 We are adding patches for most versions of 8x and 9x in the near future after we test all versi

https://github.com/0x90/vpn-arsenal

VPN pentest tools and scripts

VPN arsenal VPN pentest tools and scripts Links wwwtrustwavecom/Resources/SpiderLabs-Blog/Cracking-IKE-Mission-Improbable-(Part-1)/ wwwtrustwavecom/Resources/SpiderLabs-Blog/Cracking-IKE-Mission-Improbable-(Part-2)/ wwwtrustwavecom/Resources/SpiderLabs-Blog/Cracking-IKE-Mission-Improbable-(Part3)/ resourcesinfosecinstitutecom/vulnvpn/ http

https://github.com/nixawk/pentest-wiki

PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with others.

Authors: < nixawk >, < m1guelpf >, < binarymist > is a free online security knowledge library for pentesters / researchers If you have a good idea, please share it with others Contents Network Analysis IP Whois DNS Identify Live Hosts IDS/IPS Identification Web Application Web Application Fingerprint CMS Identification

https://github.com/pythonone/MS17-010

MS17-010 exploits, payloads, and scanners

MS17-010 MS17-010 is the Microsoft security bulletin which fixes several remote code execution vulnerabilities in the SMB service on Windows systems There are numerous things about MS17-010 that make it esoteric, such as manipulating the Windows kernel pool heap allocations, running remote Windows ring 0 shellcode, and the intricacies of the different SMB protocol versions We

References

CWE-119http://blogs.cisco.com/security/shadow-brokershttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmphttp://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.ziphttps://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.htmlhttp://www.securityfocus.com/bid/92521https://www.exploit-db.com/exploits/40258/http://www.securitytracker.com/id/1036637https://nvd.nist.govhttps://www.exploit-db.com/exploits/40258/https://github.com/RiskSense-Ops/CVE-2016-6366http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook