cisco anyconnect secure mobility client 2.2.140 vulnerabilities and exploits

(subscribe to this query)

Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote malicious users to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.

Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.2.128 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.4.5004 Cisco Anyconnect Secure Mobility Client 2.4.7030 Cisco Anyconnect Secure Mobility Client 2.4.7073 Cisco Anyconnect Secure Mobility Client 2.5 Cisco Anyconnect Secure Mobility Client 2.5.3054 Cisco Anyconnect Secure Mobility Client 2.5.3055 Cisco Anyconnect Secure Mobility Client 2.5.5112 Cisco Anyconnect Secure Mobility Client 2.5.5116 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.3.185 Cisco Anyconnect Secure Mobility Client 2.4.0202 Cisco Anyconnect Secure Mobility Client 2.4.4004 Cisco Anyconnect Secure Mobility Client 2.5.1025 Cisco Anyconnect Secure Mobility Client 2.5.2006 Cisco Anyconnect Secure Mobility Client 2.5.3041 Cisco Anyconnect Secure Mobility Client 2.5.3051 Cisco Anyconnect Secure Mobility Client 2.5.5118 Cisco Anyconnect Secure Mobility Client 2.5.5130

The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153.

Cisco Anyconnect Secure Mobility Client 3.0.5075 Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.5.2018 Cisco Anyconnect Secure Mobility Client 2.5.2017 Cisco Anyconnect Secure Mobility Client 2.5.2014 Cisco Anyconnect Secure Mobility Client 2.5.2011 Cisco Anyconnect Secure Mobility Client 2.5.5118 Cisco Anyconnect Secure Mobility Client 2.5.5125 Cisco Anyconnect Secure Mobility Client 2.4.7073 Cisco Anyconnect Secure Mobility Client 2.5.5116 Cisco Anyconnect Secure Mobility Client 2.5.2006 Cisco Anyconnect Secure Mobility Client 2.5.2001 Cisco Anyconnect Secure Mobility Client 2.5.1025 Cisco Anyconnect Secure Mobility Client 3.0 Cisco Anyconnect Secure Mobility Client -Cisco Anyconnect Secure Mobility Client 2.5.3054 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client 2.3.254 Cisco Anyconnect Secure Mobility Client 2.3.185

Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143.

Cisco Anyconnect Secure Mobility Client 2.5.3051 Cisco Anyconnect Secure Mobility Client 2.5.6005 Cisco Anyconnect Secure Mobility Client 2.5.3055 Cisco Anyconnect Secure Mobility Client 3.0.08066 Cisco Anyconnect Secure Mobility Client 2.4 Cisco Anyconnect Secure Mobility Client 2.4.1012 Cisco Anyconnect Secure Mobility Client 2.4.0202 Cisco Anyconnect Secure Mobility Client 2.5 Cisco Anyconnect Secure Mobility Client 2.5.2019 Cisco Anyconnect Secure Mobility Client 3.0.0629 Cisco Anyconnect Secure Mobility Client 3.0.1047 Cisco Anyconnect Secure Mobility Client 3.0.2052 Cisco Anyconnect Secure Mobility Client 3.1.00495 Cisco Anyconnect Secure Mobility Client 3.0.08057 Cisco Anyconnect Secure Mobility Client 2.4.5004 Cisco Anyconnect Secure Mobility Client 3.1.0 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.3 Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.5.2010 Cisco Anyconnect Secure Mobility Client 3.0.3050

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x prior to 2.5 MR6 and 3.x prior to 3.0 MR8 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote malicious users to fo...

Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.3.185 Cisco Anyconnect Secure Mobility Client 2.3.254 Cisco Anyconnect Secure Mobility Client 2.4.0202 Cisco Anyconnect Secure Mobility Client 2.4.1012 Cisco Anyconnect Secure Mobility Client 2.5 Cisco Anyconnect Secure Mobility Client 3.0 Cisco Anyconnect Secure Mobility Client 2.2.128 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.3 Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client 2.4

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x prior to 2.5 MR6 on Windows, and 2.x prior to 2.5 MR6 and 3.x prior to 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader ...

Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.3 Cisco Anyconnect Secure Mobility Client 2.4.0202 Cisco Anyconnect Secure Mobility Client 2.5 Cisco Anyconnect Secure Mobility Client 2.3.185 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client 2.3.254 Cisco Anyconnect Secure Mobility Client 2.4 Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.2.128 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.4.1012 Cisco Anyconnect Secure Mobility Client 3.0

The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) prior to 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote malicious users to...

Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.2.128 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client

1 EDB exploit

The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) prior to 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556.

Cisco Anyconnect Secure Mobility Client 2.3 Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.3.185 Cisco Anyconnect Secure Mobility Client Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.2.128

The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) prior to 2.5.3041, and 3.0.x prior to 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote m...

Cisco Anyconnect Secure Mobility Client 2.3 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client Cisco Anyconnect Secure Mobility Client 2.5.2018 Cisco Anyconnect Secure Mobility Client 2.5.1025 Cisco Anyconnect Secure Mobility Client 3.0 Cisco Anyconnect Secure Mobility Client 2.2.128 Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.4 Cisco Anyconnect Secure Mobility Client 2.4.1012 Cisco Anyconnect Secure Mobility Client 2.5.2011 Cisco Anyconnect Secure Mobility Client 2.5.2010 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.4.0202 Cisco Anyconnect Secure Mobility Client 2.5 Cisco Anyconnect Secure Mobility Client 2.5.2006 Cisco Anyconnect Secure Mobility Client 2.5.2001 Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.3.254

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook