VulnSocial

CVE-2016-6366(cisco / 7604)

LOWCVSS 8.8 ยท HIGHCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.

cisco CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2022-06-14. Apply updates per vendor instructions.

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-120

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • 7604
  • 7606-s
  • 7609-s
  • 7613-s

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Affected systems

Vendors
cisco
Products
76047606-s7609-s7613-sadaptive_security_appliance_softwareasa_1000v_cloud_firewall_softwareasa_5500asa_5500-xasa_5500_csc-ssmasa_5505

3 versions affected across 45 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions ยท 2026-09-25: 109-25
Full discourse1 post
  • General Intels Daily@intels_daily

    ๐Ÿ”ด ๐—–๐—ฅ๐—œ๐—ง๐—œ๐—–๐—”๐—Ÿ ยท ๐—”๐—ฐ๐—ฐ๐—ฒ๐˜€๐˜€ ๐˜€๐—ฎ๐—น๐—ฒ ๐Ÿข Target: ๐—ก๐—ฎ๐˜๐—ถ๐—ผ๐—ป๐—ฎ๐—น ๐—œ๐—ป๐—ฑ๐˜‚๐˜€๐˜๐—ฟ๐—ถ๐—ฎ๐—น ๐——๐—ฒ๐˜ƒ๐—ฒ๐—น๐—ผ๐—ฝ๐—บ๐—ฒ๐—ป๐˜ ๐—–๐—ฒ๐—ป๐˜๐—ฒ๐—ฟ ๐Ÿงฉ Products: ๐—–๐—ถ๐˜€๐—ฐ๐—ผ ๐—œ๐—ข๐—ฆ ๐—ซ๐—˜, ๐—–๐—ถ๐˜€๐—ฐ๐—ผ ๐—–๐—ฎ๐˜๐—ฎ๐—น๐˜†๐˜€๐˜ ๐Ÿต๐Ÿฐ๐Ÿฌ๐Ÿณ, ๐—–๐—ถ๐˜€๐—ฐ๐—ผ ๐—–๐—ฎ๐˜๐—ฎ๐—น๐˜†๐˜€๐˜ ๐Ÿต๐Ÿฏ๐Ÿฌ๐Ÿฌ ๐Ÿ›ก๏ธ CVE-2016-6366, CVE-2020-3580 Threat actor Blacknet00 claims to have compromised the National Industrial Development Center (NIDC) in Saudi Arabia. The post provides detailed technical artifacts, including network device configurations, internal IP addresses, routing tables, and multiple backdoor credentials for a Cisco router (NIDC-DC-RTR-MOBILY). #AccessSale #InitialAccess #ThreatIntel #CTI

    00010163
    659 followersView on X
CPE platform detail46 entries

46 of 46 entries

PartVendorProductVersionTarget SWTarget HW
HWcisco7604---
HWcisco7606-s---
HWcisco7609-s---
HWcisco7613-s---
OSciscoadaptive_security_appliance_software---
OSciscoasa_1000v_cloud_firewall_software8.7.1--
OSciscoasa_1000v_cloud_firewall_software8.7.1.1--
HWciscoasa_5500---
HWciscoasa_5500-x---
HWciscoasa_5500_csc-ssm---
HWciscoasa_5505---
HWciscoasa_5506-x---
HWciscoasa_5506h-x---
HWciscoasa_5506w-x---
HWciscoasa_5508-x---
HWciscoasa_5510---
HWciscoasa_5512-x---
HWciscoasa_5515-x---
HWciscoasa_5516-x---
HWciscoasa_5520---
HWciscoasa_5525-x---
HWciscoasa_5540---
HWciscoasa_5545-x---
HWciscoasa_5550---
HWciscoasa_5555-x---
HWciscoasa_5580---
HWciscoasa_5585-x---
HWciscocatalyst_6500---
HWciscocatalyst_6500-e---
HWciscocatalyst_6503-e---
HWciscocatalyst_6504-e---
HWciscocatalyst_6506-e---
HWciscocatalyst_6509-e---
HWciscocatalyst_6509-neb-a---
HWciscocatalyst_6509-v-e---
HWciscocatalyst_6513---
HWciscocatalyst_6513-e---
HWciscopix_firewall_501---
HWciscopix_firewall_506---
HWciscopix_firewall_506e---
HWciscopix_firewall_515---
HWciscopix_firewall_515e---
HWciscopix_firewall_520---
HWciscopix_firewall_525---
HWciscopix_firewall_535---
OSciscopix_firewall_software---

Explore more

Back to dashboardcisco CVEs7604 vulnerabilities