AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2016-6366

HIGH · CVSS 8.8 EPSS 87.56% CISA KEV · Actively Exploited Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2016-08-18 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
External Security References

Note: these links are listed for security research and verification purposes only.

CISA KEV Details

Status: This CVE is listed in CISA's Known Exploited Vulnerabilities catalog.

Ransomware use: Unknown

Added to KEV: 2022-05-24

Required action: Apply updates per vendor instructions.

CVE
CVE-2016-6366
Severity
HIGH
CVSS
8.8
EPSS
87.56%
Cisco

Original NVD Description

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.