CVE-2016-1287 in the critical feed json
Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38),…
published 2016-02-11 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-2386
- cvss
- 9.8
- version 3.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 74.2%
- EPSS 74.2% chance of exploitation in 30 days, percentile 99.4%
- public exploits
- 1
- Exploit-DB
Summary
Buffer overflow in the IKEv1 and IKEv2 implementations in Cisco ASA Software before 8.4(7.30), 8.7 before 8.7(1.18), 9.0 before 9.0(4.38), 9.1 before 9.1(7), 9.2 before 9.2(4.5), 9.3 before 9.3(3.7), 9.4 before 9.4(2.4), and 9.5 before 9.5(2.2) on ASA 5500 devices, ASA 5500-X devices, ASA Services Module for Cisco Catalyst 6500 and Cisco 7600 devices, ASA 1000V devices, Adaptive Security Virtual Appliance (aka ASAv), Firepower 9300 ASA Security Module, and ISA 3000 devices allows remote attackers to execute arbitrary code or cause a denial of service (device reload) via crafted UDP packets, aka Bug IDs CSCux29978 and CSCux42019.
Timeline
- Published
- First public exploit (EDB-39823)
Exploit prediction
74.22% chance of exploitation in the next 30 days, higher than 99.4% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- EDB-39823 Cisco ASA Software 8.x/9.x - IKEv1 / IKEv2 Buffer Overflow remote, 2016-05-17
- packetstormsecurity.com http://packetstormsecurity.com/files/137100/Cisco-ASA-Software-IKEv1-IKEv2-Buffer-Overflow.html referenced PoC, tagged "exploit" by a source, unverified
- blog.exodusintel.com https://blog.exodusintel.com/2016/02/10/firewall-hacking/ referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
-
exploit-db.com
/exploits/39823/
exploit, third-party-advisory, vdb-entry
-
packetstormsecurity.com
/files/137100/Cisco-ASA-Software-IKEv1-IKEv2-Buffer-Overflow.html
exploit, third-party-advisory, vdb-entry
-
blog.exodusintel.com
/2016/02/10/firewall-hacking/
exploit, technical-description, third-party-advisory
-
tools.cisco.com
/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160210-asa-ike
vendor-advisory
-
securitytracker.com
/id/1034997
vdb-entry, third-party-advisory
-
kb.cert.org
/vuls/id/327976
third-party-advisory, us-government-resource
Sources
- CVE List CVE-2016-1287
- NVD CVE-2016-1287
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.