Cisco · Adaptive Security Appliance (ASA)
CVE-2016-6366
Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
Cos'è
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.
CISA: A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause a reload of the affected system or to remotely execute code.
Cosa fare
Apply updates per vendor instructions.
Scadenza per le agenzie federali USA: 14 giugno 2022
- Aggiunta all'elenco CISA
- 24 maggio 2022
- Pubblicato
- 18 agosto 2016
- Gravità
- Alta 8,8 CVSS 3.1
- Probabilità di attacchi nei prossimi 30 giorni (EPSS)
- 88% tra il 0,2% più alto di tutte le vulnerabilità note
- Tipo di debolezza
- CWE-119
- Più dettagli
- NVD · CVE.org · CISA
Tutte le fonti (8)
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-asa-snmp
- http://www.securityfocus.com/bid/92521
- https://github.com/offensive-security/exploit-database-bin-sploits/raw/master/sploits/40258.zip
- http://blogs.cisco.com/security/shadow-brokers
- http://tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516
- https://zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-for.html
- https://www.exploit-db.com/exploits/40258/
- http://www.securitytracker.com/id/1036637
Altre falle sfruttate di Cisco
| Aggiunto | Vulnerabilità | Prodotto | Gravità | Probabilità di attacco |
|---|---|---|---|---|
| 12 nov 2024 | Cross-Site Scripting (XSS) | Adaptive Security Appliance (ASA) | Media 5,4 | 23% |
| 24 mag 2022 | CLI Remote Code Execution | Adaptive Security Appliance (ASA) | Alta 7,8 | 23% |
| 3 nov 2021 | Denial-of-Service | Adaptive Security Appliance (ASA) | Alta 7,5 | 99,9% |
| 14 ott 2026 | Relative Path Traversal | Secure Email Gateway | Critica 9,8 | 2,2% |
| 30 set 2026 | Hex Encoding | Catalyst SD-WAN Manager | Critica 9,8 | 39% |
| 16 set 2026 | Incorrect Use of Privileged APIs | Identity Services Engine | Critica 10,0 | 76% |
| 14 set 2026 | SQL Injection | Secure Email Gateway | Critica 9,8 | 30% |
| 9 set 2026 | Firewall Management Center Authentication Bypass Using an Alternate Path or Channel | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Critica 10,0 | 88% |
Fonti: Known Exploited Vulnerabilities (CISA, pubblico dominio), CVE records (cve.org) e EPSS (FIRST). La probabilità di attacco è la stima EPSS che qualcuno provi a sfruttare la falla nei prossimi 30 giorni.