UpHeron
All vulnerabilities

Servers and applications

CVE-2016-1287

Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7), 9.4 before 9.4(2.4), and 9.5 before 9.5(2.2) on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cisco Catalyst 6500 and Cisco 7600 devices, ASA 1000V devices, Adaptive Security Virtual…

Severity
Critical 9.8
Published
11 Feb 2016
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Exploit chance
74% in the next 30 daysHigher than 99% of CVEs. EPSS by FIRST, 11 Nov 2026
Weakness
Memory buffer errors (CWE-119)
Attack
Over the network · No login needed · No user action needed
Attacker can
Read data · Change data · Take it down
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Sources
NVD

Description

Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7), 9.4 before 9.4(2.4), and 9.5 before 9.5(2.2) on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cisco Catalyst 6500 and Cisco 7600 devices, ASA 1000V devices, Adaptive Security Virtual Appliance (aka ASAv), Firepower 9300 ASA Security Module, and ISA 3000 devices allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via crafted UDP packets, aka Bug IDs CSCux29978 and CSCux42019.

From NVD.

Affected software

SoftwareAffected versions
Cisco ASA and Firepower Threat DefenseServers and applications · cpe:o:cisco:adaptive_security_appliance_software
  • Version 9.5.2
  • Version 9.5.1
  • Version 9.4.2.3
  • Version 9.4.2
All 199 release lines
  • Version 7.2.1
  • Version 7.2.1.9
  • Version 7.2.1.13
  • Version 7.2.1.19
  • Version 7.2.1.24
  • Version 7.2.2
  • Version 7.2.2.6
  • Version 7.2.2.10
  • Version 7.2.2.14
  • Version 7.2.2.18
  • Version 7.2.2.19
  • Version 7.2.2.22
  • Version 7.2.2.34
  • Version 7.2.3
  • Version 7.2.3.1
  • Version 7.2.3.12
  • Version 7.2.3.16
  • Version 7.2.4
  • Version 7.2.4.6
  • Version 7.2.4.9
  • Version 7.2.4.18
  • Version 7.2.4.25
  • Version 7.2.4.27
  • Version 7.2.4.30
  • Version 7.2.4.33
  • Version 7.2.5
  • Version 7.2.5.2
  • Version 7.2.5.4
  • Version 7.2.5.7
  • Version 7.2.5.8
  • Version 7.2.5.10
  • Version 7.2.5.12
  • Version 7.2.5.16
  • Version 8.2.0.45
  • Version 8.2.1
  • Version 8.2.1.11
  • Version 8.2.2
  • Version 8.2.2.9
  • Version 8.2.2.10
  • Version 8.2.2.12
  • Version 8.2.2.16
  • Version 8.2.2.17
  • Version 8.2.3
  • Version 8.2.4
  • Version 8.2.4.1
  • Version 8.2.4.4
  • Version 8.2.5
  • Version 8.2.5.13
  • Version 8.2.5.22
  • Version 8.2.5.26
  • Version 8.2.5.33
  • Version 8.2.5.40
  • Version 8.2.5.41
  • Version 8.2.5.46
  • Version 8.2.5.48
  • Version 8.2.5.50
  • Version 8.2.5.52
  • Version 8.2.5.55
  • Version 8.2.5.57
  • Version 8.3.1
  • Version 8.3.1.1
  • Version 8.3.1.4
  • Version 8.3.1.6
  • Version 8.3.2
  • Version 8.3.2.4
  • Version 8.3.2.13
  • Version 8.3.2.23
  • Version 8.3.2.25
  • Version 8.3.2.31
  • Version 8.3.2.33
  • Version 8.3.2.34
  • Version 8.3.2.37
  • Version 8.3.2.39
  • Version 8.3.2.40
  • Version 8.3.2.41
  • Version 8.3.2.44
  • Version 8.4.0
  • Version 8.4.1
  • Version 8.4.1.3
  • Version 8.4.1.11
  • Version 8.4.2
  • Version 8.4.2.1
  • Version 8.4.2.8
  • Version 8.4.3
  • Version 8.4.3.8
  • Version 8.4.3.9
  • Version 8.4.4
  • Version 8.4.4.1
  • Version 8.4.4.3
  • Version 8.4.4.5
  • Version 8.4.4.9
  • Version 8.4.5
  • Version 8.4.5.6
  • Version 8.4.6
  • Version 8.4.7
  • Version 8.4.7.3
  • Version 8.4.7.15
  • Version 8.4.7.22
  • Version 8.4.7.23
  • Version 8.4.7.26
  • Version 8.4.7.28
  • Version 8.4.7.29
  • Version 8.5.1
  • Version 8.5.1.1
  • Version 8.5.1.6
  • Version 8.5.1.7
  • Version 8.5.1.14
  • Version 8.5.1.17
  • Version 8.5.1.18
  • Version 8.5.1.19
  • Version 8.5.1.21
  • Version 8.5.1.24
  • Version 8.6.1
  • Version 8.6.1.1
  • Version 8.6.1.2
  • Version 8.6.1.5
  • Version 8.6.1.10
  • Version 8.6.1.12
  • Version 8.6.1.13
  • Version 8.6.1.14
  • Version 8.6.1.17
  • Version 8.7.1
  • Version 8.7.1.1
  • Version 8.7.1.3
  • Version 8.7.1.4
  • Version 8.7.1.7
  • Version 8.7.1.8
  • Version 8.7.1.11
  • Version 8.7.1.13
  • Version 8.7.1.16
  • Version 8.7.1.17
  • Version 9.0.1
  • Version 9.0.2
  • Version 9.0.2.10
  • Version 9.0.3
  • Version 9.0.3.6
  • Version 9.0.3.8
  • Version 9.0.4
  • Version 9.0.4.1
  • Version 9.0.4.5
  • Version 9.0.4.7
  • Version 9.0.4.17
  • Version 9.0.4.20
  • Version 9.0.4.24
  • Version 9.0.4.26
  • Version 9.0.4.29
  • Version 9.0.4.33
  • Version 9.0.4.35
  • Version 9.0.4.37
  • Version 9.1.1
  • Version 9.1.1.4
  • Version 9.1.2
  • Version 9.1.2.8
  • Version 9.1.3
  • Version 9.1.3.2
  • Version 9.1.4
  • Version 9.1.4.5
  • Version 9.1.5
  • Version 9.1.5.10
  • Version 9.1.5.12
  • Version 9.1.5.15
  • Version 9.1.5.21
  • Version 9.1.6
  • Version 9.1.6.1
  • Version 9.1.6.4
  • Version 9.1.6.6
  • Version 9.1.6.8
  • Version 9.1.6.10
  • Version 9.2.1
  • Version 9.2.2
  • Version 9.2.2.4
  • Version 9.2.2.7
  • Version 9.2.2.8
  • Version 9.2.3
  • Version 9.2.3.3
  • Version 9.2.3.4
  • Version 9.2.4
  • Version 9.2.4.2
  • Version 9.2.4.4
  • Version 9.3.1
  • Version 9.3.1.1
  • Version 9.3.2
  • Version 9.3.2.2
  • Version 9.3.3
  • Version 9.3.3.1
  • Version 9.3.3.2
  • Version 9.3.3.5
  • Version 9.3.3.6
  • Version 9.3.5
  • Version 9.4.0.115
  • Version 9.4.1
  • Version 9.4.1.1
  • Version 9.4.1.2
  • Version 9.4.1.3
  • Version 9.4.1.5
  • Version 9.4.2
  • Version 9.4.2.3
  • Version 9.5.1
  • Version 9.5.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2016-1287
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2016-1287