CISA KEV catalog
Confirmed active exploitation.
Listed in CISA's catalog of Known Exploited Vulnerabilities: attackers are using it in real attacks. Patch it with priority.
- Name
- Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply updates per vendor instructions.
Description
Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.
Affected products
cisco: pix firewall software; cisco: pix firewall 501; cisco: pix firewall 506; cisco: pix firewall 506e; cisco: pix firewall 515; cisco: pix firewall 515e; cisco: pix firewall 520; cisco: pix firewall 525; cisco: pix firewall 535; cisco: adaptive security appliance software; cisco: 7604; cisco: 7606-s; cisco: 7609-s; cisco: 7613-s; cisco: asa 5500
References10
- blogs.cisco.com/security/shadow-brokers ExploitPress/Media CoverageVendor Advisory
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/c… Vendor Advisory
- tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516 Vendor Advisory
- blogs.cisco.com/security/shadow-brokers ExploitPress/Media CoverageVendor Advisory
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/c… Vendor Advisory
- tools.cisco.com/security/center/viewErp.x?alertId=ERP-56516 Vendor Advisory
- github.com/offensive-security/exploit-database-bin-sploits/raw/… Broken LinkExploit
- zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-f… ExploitTechnical Description
- github.com/offensive-security/exploit-database-bin-sploits/raw/… Broken LinkExploit
- zerosum0x0.blogspot.com/2016/09/reverse-engineering-cisco-asa-f… ExploitTechnical Description
Metrics
- CVSS 3.1
-
8.8
HIGH
Score source: NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 88% percentile: 100 · as of 8 November 2026
- CWE
- CWE-120
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.