Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, ASA Services Module, ASA 1000V, ASAv, Firepower 9300 ASA Security Module, PIX, and FWSM devices allows remote authenticated users to execute arbitrary code via crafted IPv4 SNMP packets, aka Bug ID CSCva92151 or EXTRABACON.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCisco 7604
HWCiscoall versionsCisco 7606 S
HWCiscoall versionsCisco 7609 S
HWCiscoall versionsCisco 7613 S
HWCiscoall versionsCisco Adaptive Security Appliance Software
OSCisco9.6.0 – 9.6.1\(11\) (excl.)9.1.1 – 9.1.7\(9\) (excl.)9.2.0 – 9.2.4\(14\) (excl.)9.3.0 – 9.3.3\(10\) (excl.)9.4.0.115 – 9.4.3\(8\) (excl.)9.5.0 – 9.5\(3\)7.2.1 – 9.0.4.40 (excl.)Cisco Asa 1000v Cloud Firewall Software
OSCisco8.7.18.7.1.1Cisco Asa 5500
HWCiscoall versionsCisco Asa 5500 Csc Ssm
HWCiscoall versionsCisco Asa 5500 X
HWCiscoall versionsCisco Asa 5505
HWCiscoall versionsCisco Asa 5506h X
HWCiscoall versionsCisco Asa 5506w X
HWCiscoall versionsCisco Asa 5506 X
HWCiscoall versionsCisco Asa 5508 X
HWCiscoall versionsCisco Asa 5510
HWCiscoall versionsCisco Asa 5512 X
HWCiscoall versionsCisco Asa 5515 X
HWCiscoall versionsCisco Asa 5516 X
HWCiscoall versionsCisco Asa 5520
HWCiscoall versionsCisco Asa 5525 X
HWCiscoall versionsCisco Asa 5540
HWCiscoall versionsCisco Asa 5545 X
HWCiscoall versionsCisco Asa 5550
HWCiscoall versionsCisco Asa 5555 X
HWCiscoall versionsCisco Asa 5580
HWCiscoall versionsCisco Asa 5585 X
HWCiscoall versionsCisco Catalyst 6500
HWCiscoall versionsCisco Catalyst 6500 E
HWCiscoall versionsCisco Catalyst 6503 E
HWCiscoall versionsCisco Catalyst 6504 E
HWCiscoall versions
CISA KEV — detailsi
- Vendori
- Cisco ↗
- Producti
- Adaptive Security Appliance (ASA)
- Added to KEVi
- May 24, 2022
- Remediation deadline (US Federal)i
- June 14, 2022(overdue)
Apply updates per vendor instructions.
A buffer overflow vulnerability in the Simple Network Management Protocol (SNMP) code of Cisco ASA software could allow an attacker to cause a reload of the affected system or to remotely execute code.
Related vulnerabilities
RCE jako root w Cisco ASA i FTD poprzez podatny serwer VPN web
RCE w web services Cisco ASA, FTD, IOS, IOS XE, IOS XR przez HTTP
RCE w podsystemie SSH Cisco ASA — wykonanie poleceń jako root
Cisco ASA – brak walidacji autentyczności obrazu ASDM umożliwia RCE
Path Traversal w Cisco ASA i FTD — nieautoryzowany dostęp do plików przez WebVPN/AnyConnect