Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco anyconnect secure mobility client - vulnerabilities and exploits

(subscribe to this query)
6.6
CVSSv2
CVE-2015-6322
The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 up to and including 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.
Cisco Anyconnect Secure Mobility Client 2.3.0254Cisco Anyconnect Secure Mobility Client 2.3.2016Cisco Anyconnect Secure Mobility Client 2.5.2011Cisco Anyconnect Secure Mobility Client 2.5.2017Cisco Anyconnect Secure Mobility Client 2.5.3051Cisco Anyconnect Secure Mobility Client 2.5.3055Cisco Anyconnect Secure Mobility Client 3.0.4235Cisco Anyconnect Secure Mobility Client 3.0.5080Cisco Anyconnect Secure Mobility Client 3.1.05187Cisco Anyconnect Secure Mobility Client 3.1.07021Cisco Anyconnect Secure Mobility Client 4.0\\(64\\)Cisco Anyconnect Secure Mobility Client 4.0\\(2049\\)Cisco Anyconnect Secure Mobility Client 2.4.1012Cisco Anyconnect Secure Mobility Client 2.5 BaseCisco Anyconnect Secure Mobility Client 2.5.0217Cisco Anyconnect Secure Mobility Client 2.5.2006Cisco Anyconnect Secure Mobility Client 3.0.0629Cisco Anyconnect Secure Mobility Client 3.0.1047Cisco Anyconnect Secure Mobility Client 3.0.2052Cisco Anyconnect Secure Mobility Client 3.0.3050Cisco Anyconnect Secure Mobility Client 3.1\\(60\\)Cisco Anyconnect Secure Mobility Client 4.0.0
7.2
CVSSv2
CVE-2016-6369
Cisco AnyConnect Secure Mobility Client prior to 4.2.05015 and 4.3.x prior to 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464.
Cisco Anyconnect Secure Mobility Client 2.5.2006Cisco Anyconnect Secure Mobility Client 2.5.2011Cisco Anyconnect Secure Mobility Client 3.0.1047Cisco Anyconnect Secure Mobility Client 2.0.0343Cisco Anyconnect Secure Mobility Client 2.3.0185Cisco Anyconnect Secure Mobility Client 2.3.1003Cisco Anyconnect Secure Mobility Client 2.4.1012Cisco Anyconnect Secure Mobility Client 3.0.3054Cisco Anyconnect Secure Mobility Client 3.0.09266Cisco Anyconnect Secure Mobility Client 3.1.05182Cisco Anyconnect Secure Mobility Client 4.0\\(64\\)Cisco Anyconnect Secure Mobility Client 3.1.07021Cisco Anyconnect Secure Mobility Client 4.0\\(2049\\)Cisco Anyconnect Secure Mobility Client 4.2.04039Cisco Anyconnect Secure Mobility Client 4.3.00748Cisco Anyconnect Secure Mobility Client 2.5.2017Cisco Anyconnect Secure Mobility Client 2.5.2018Cisco Anyconnect Secure Mobility Client 2.5.2019Cisco Anyconnect Secure Mobility Client 2.5.3041Cisco Anyconnect Secure Mobility Client 2.5.3046Cisco Anyconnect Secure Mobility Client 2.5.3051Cisco Anyconnect Secure Mobility Client 2.5.3054
7.2
CVSSv2
CVE-2017-3813
A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows could allow an unauthenticated, local malicious user to open Internet Explorer with the privileges of the SYSTEM user. The vulnerability is due to insufficient i...
Cisco Anyconnect Secure Mobility Client 4.1.08005Cisco Anyconnect Secure Mobility Client 4.2.04039Cisco Anyconnect Secure Mobility Client 4.0.00052Cisco Anyconnect Secure Mobility Client 4.0.00061Cisco Anyconnect Secure Mobility Client 4.2.00096Cisco Anyconnect Secure Mobility Client 4.2.01022Cisco Anyconnect Secure Mobility Client 4.3.00748Cisco Anyconnect Secure Mobility Client 4.3.01095Cisco Anyconnect Secure Mobility Client 4.2.05015Cisco Anyconnect Secure Mobility Client 4.2.06014Cisco Anyconnect Secure Mobility Client 4.0.00057Cisco Anyconnect Secure Mobility Client 4.0.00048Cisco Anyconnect Secure Mobility Client 4.1.00028Cisco Anyconnect Secure Mobility Client 4.1.02011Cisco Anyconnect Secure Mobility Client 4.2.01035Cisco Anyconnect Secure Mobility Client 4.2.02075Cisco Anyconnect Secure Mobility Client 4.3.02039Cisco Anyconnect Secure Mobility Client 4.3.03086Cisco Anyconnect Secure Mobility Client 4.1.04011Cisco Anyconnect Secure Mobility Client 4.1.06013Cisco Anyconnect Secure Mobility Client 4.1.06020Cisco Anyconnect Secure Mobility Client 4.2.03013
6.8
CVSSv2
CVE-2013-5559
Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote malicious users to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.
Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.2.128Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.4.5004Cisco Anyconnect Secure Mobility Client 2.4.7030Cisco Anyconnect Secure Mobility Client 2.4.7073Cisco Anyconnect Secure Mobility Client 2.5Cisco Anyconnect Secure Mobility Client 2.5.3054Cisco Anyconnect Secure Mobility Client 2.5.3055Cisco Anyconnect Secure Mobility Client 2.5.5112Cisco Anyconnect Secure Mobility Client 2.5.5116Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.3.185Cisco Anyconnect Secure Mobility Client 2.4.0202Cisco Anyconnect Secure Mobility Client 2.4.4004Cisco Anyconnect Secure Mobility Client 2.5.1025Cisco Anyconnect Secure Mobility Client 2.5.2006Cisco Anyconnect Secure Mobility Client 2.5.3041Cisco Anyconnect Secure Mobility Client 2.5.3051Cisco Anyconnect Secure Mobility Client 2.5.5118Cisco Anyconnect Secure Mobility Client 2.5.5130
6.6
CVSSv2
CVE-2013-1172
The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153.
Cisco Anyconnect Secure Mobility Client 3.0.5075Cisco Anyconnect Secure Mobility Client 2.0Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.5.2018Cisco Anyconnect Secure Mobility Client 2.5.2017Cisco Anyconnect Secure Mobility Client 2.5.2014Cisco Anyconnect Secure Mobility Client 2.5.2011Cisco Anyconnect Secure Mobility Client 2.5.5118Cisco Anyconnect Secure Mobility Client 2.5.5125Cisco Anyconnect Secure Mobility Client 2.4.7073Cisco Anyconnect Secure Mobility Client 2.5.5116Cisco Anyconnect Secure Mobility Client 2.5.2006Cisco Anyconnect Secure Mobility Client 2.5.2001Cisco Anyconnect Secure Mobility Client 2.5.1025Cisco Anyconnect Secure Mobility Client 3.0Cisco Anyconnect Secure Mobility Client -Cisco Anyconnect Secure Mobility Client 2.5.3054Cisco Anyconnect Secure Mobility Client 2.3.2016Cisco Anyconnect Secure Mobility Client 2.3.254Cisco Anyconnect Secure Mobility Client 2.3.185
6.6
CVSSv2
CVE-2013-1173
Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143.
Cisco Anyconnect Secure Mobility Client 2.5.3051Cisco Anyconnect Secure Mobility Client 2.5.6005Cisco Anyconnect Secure Mobility Client 2.5.3055Cisco Anyconnect Secure Mobility Client 3.0.08066Cisco Anyconnect Secure Mobility Client 2.4Cisco Anyconnect Secure Mobility Client 2.4.1012Cisco Anyconnect Secure Mobility Client 2.4.0202Cisco Anyconnect Secure Mobility Client 2.5Cisco Anyconnect Secure Mobility Client 2.5.2019Cisco Anyconnect Secure Mobility Client 3.0.0629Cisco Anyconnect Secure Mobility Client 3.0.1047Cisco Anyconnect Secure Mobility Client 3.0.2052Cisco Anyconnect Secure Mobility Client 3.1.00495Cisco Anyconnect Secure Mobility Client 3.0.08057Cisco Anyconnect Secure Mobility Client 2.4.5004Cisco Anyconnect Secure Mobility Client 3.1.0Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.3Cisco Anyconnect Secure Mobility Client 2.2.136Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.5.2010Cisco Anyconnect Secure Mobility Client 3.0.3050
7.2
CVSSv2
CVE-2016-9192
A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local malicious user to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSC...
Cisco Anyconnect Secure Mobility Client 3.1\\(60\\)Cisco Anyconnect Secure Mobility Client 4.0\\(64\\)Cisco Anyconnect Secure Mobility Client 4.0.00048Cisco Anyconnect Secure Mobility Client 3.1.05187Cisco Anyconnect Secure Mobility Client 3.1.06073Cisco Anyconnect Secure Mobility Client 4.0.00051Cisco Anyconnect Secure Mobility Client 4.0\\(48\\)Cisco Anyconnect Secure Mobility Client 4.3.00748Cisco Anyconnect Secure Mobility Client 4.1\\(8\\)Cisco Anyconnect Secure Mobility Client 4.3.01095Cisco Anyconnect Secure Mobility Client 4.2.04039Cisco Anyconnect Secure Mobility Client 3.1.07021Cisco Anyconnect Secure Mobility Client 4.0\\(2049\\)Cisco Anyconnect Secure Mobility Client 3.1.05182Cisco Anyconnect Secure Mobility Client 3.1.02043Cisco Anyconnect Secure Mobility Client 4.1.0Cisco Anyconnect Secure Mobility Client 4.0.0Cisco Anyconnect Secure Mobility Client 4.2.0Cisco Anyconnect Secure Mobility Client 3.1.0Cisco Anyconnect Secure Mobility Client 4.3.0
4
CVSSv2
CVE-2012-2498
Cisco AnyConnect Secure Mobility Client 3.0 up to and including 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle malicious users to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.
Cisco Anyconnect Secure Mobility Client 3.0.0629Cisco Anyconnect Secure Mobility Client 3.0.08057Cisco Anyconnect Secure Mobility Client 3.0.08066Cisco Anyconnect Secure Mobility Client 3.0Cisco Anyconnect Secure Mobility Client 3.0.07059
4
CVSSv2
CVE-2012-2500
Cisco AnyConnect Secure Mobility Client 3.0 prior to 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle malicious users to spoof servers via a crafted certificate, aka Bug ID CSCtz29470.
Cisco Anyconnect Secure Mobility Client 3.0.0629Cisco Anyconnect Secure Mobility Client 3.0.07059Cisco Anyconnect Secure Mobility Client 3.0
5.8
CVSSv2
CVE-2012-2499
The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 prior to 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle malicious users to spoof servers via a crafted certificate, aka Bug ID CSCtz26985.
Cisco Anyconnect Secure Mobility Client 3.0Cisco Anyconnect Secure Mobility Client 3.0.07059Cisco Anyconnect Secure Mobility Client 3.0.0629
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook