Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco anyconnect secure mobility client 2.5 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2013-5559
Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote malicious users to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.
Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.2.128Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.4.5004Cisco Anyconnect Secure Mobility Client 2.4.7030Cisco Anyconnect Secure Mobility Client 2.4.7073Cisco Anyconnect Secure Mobility Client 2.5Cisco Anyconnect Secure Mobility Client 2.5.3054Cisco Anyconnect Secure Mobility Client 2.5.3055Cisco Anyconnect Secure Mobility Client 2.5.5112Cisco Anyconnect Secure Mobility Client 2.5.5116Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.3.185Cisco Anyconnect Secure Mobility Client 2.4.0202Cisco Anyconnect Secure Mobility Client 2.4.4004Cisco Anyconnect Secure Mobility Client 2.5.1025Cisco Anyconnect Secure Mobility Client 2.5.2006Cisco Anyconnect Secure Mobility Client 2.5.3041Cisco Anyconnect Secure Mobility Client 2.5.3051Cisco Anyconnect Secure Mobility Client 2.5.5118Cisco Anyconnect Secure Mobility Client 2.5.5130
NA
CVE-2013-1172
The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153.
Cisco Anyconnect Secure Mobility Client 3.0.5075Cisco Anyconnect Secure Mobility Client 2.0Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.5.2018Cisco Anyconnect Secure Mobility Client 2.5.2017Cisco Anyconnect Secure Mobility Client 2.5.2014Cisco Anyconnect Secure Mobility Client 2.5.2011Cisco Anyconnect Secure Mobility Client 2.5.5118Cisco Anyconnect Secure Mobility Client 2.5.5125Cisco Anyconnect Secure Mobility Client 2.4.7073Cisco Anyconnect Secure Mobility Client 2.5.5116Cisco Anyconnect Secure Mobility Client 2.5.2006Cisco Anyconnect Secure Mobility Client 2.5.2001Cisco Anyconnect Secure Mobility Client 2.5.1025Cisco Anyconnect Secure Mobility Client 3.0Cisco Anyconnect Secure Mobility Client -Cisco Anyconnect Secure Mobility Client 2.5.3054Cisco Anyconnect Secure Mobility Client 2.3.2016Cisco Anyconnect Secure Mobility Client 2.3.254Cisco Anyconnect Secure Mobility Client 2.3.185
NA
CVE-2013-1173
Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143.
Cisco Anyconnect Secure Mobility Client 2.5.3051Cisco Anyconnect Secure Mobility Client 2.5.6005Cisco Anyconnect Secure Mobility Client 2.5.3055Cisco Anyconnect Secure Mobility Client 3.0.08066Cisco Anyconnect Secure Mobility Client 2.4Cisco Anyconnect Secure Mobility Client 2.4.1012Cisco Anyconnect Secure Mobility Client 2.4.0202Cisco Anyconnect Secure Mobility Client 2.5Cisco Anyconnect Secure Mobility Client 2.5.2019Cisco Anyconnect Secure Mobility Client 3.0.0629Cisco Anyconnect Secure Mobility Client 3.0.1047Cisco Anyconnect Secure Mobility Client 3.0.2052Cisco Anyconnect Secure Mobility Client 3.1.00495Cisco Anyconnect Secure Mobility Client 3.0.08057Cisco Anyconnect Secure Mobility Client 2.4.5004Cisco Anyconnect Secure Mobility Client 3.1.0Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.3Cisco Anyconnect Secure Mobility Client 2.2.136Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.5.2010Cisco Anyconnect Secure Mobility Client 3.0.3050
NA
CVE-2012-2494
The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x prior to 2.5 MR6 and 3.x prior to 3.0 MR8 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote malicious users to fo...
Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.3.185Cisco Anyconnect Secure Mobility Client 2.3.254Cisco Anyconnect Secure Mobility Client 2.4.0202Cisco Anyconnect Secure Mobility Client 2.4.1012Cisco Anyconnect Secure Mobility Client 2.5Cisco Anyconnect Secure Mobility Client 3.0Cisco Anyconnect Secure Mobility Client 2.2.128Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.2.136Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.3Cisco Anyconnect Secure Mobility Client 2.0Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.3.2016Cisco Anyconnect Secure Mobility Client 2.4
NA
CVE-2012-2495
The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x prior to 3.0 MR8 and Cisco Secure Desktop prior to 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote malicious users to forc...
Cisco Anyconnect Secure Mobility Client 3.0Cisco Secure Desktop 3.1.1.33Cisco Secure Desktop 3.4Cisco Secure Desktop 3.3Cisco Secure Desktop 3.5.2001Cisco Secure Desktop 3.2.1Cisco Secure Desktop 3.2Cisco Secure Desktop 3.1Cisco Secure Desktop 3.5.841Cisco Secure Desktop 3.4.2Cisco Secure Desktop 3.4.1Cisco Secure Desktop 3.4.2048Cisco Secure Desktop 3.1.1.45Cisco Secure Desktop 3.1.1.27Cisco Secure Desktop 3.1.1Cisco Secure Desktop 3.5Cisco Secure Desktop 3.5.1077Cisco Secure Desktop
NA
CVE-2012-2496
A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 3.x prior to 3.0 MR7 on 64-bit Linux platforms does not properly restrict use of Java components, which allows remote malicious users to execute arbitrar...
Cisco Anyconnect Secure Mobility Client 3.0
NA
CVE-2012-2493
The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x prior to 2.5 MR6 on Windows, and 2.x prior to 2.5 MR6 and 3.x prior to 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader ...
Cisco Anyconnect Secure Mobility Client 2.2.136Cisco Anyconnect Secure Mobility Client 2.3Cisco Anyconnect Secure Mobility Client 2.4.0202Cisco Anyconnect Secure Mobility Client 2.5Cisco Anyconnect Secure Mobility Client 2.3.185Cisco Anyconnect Secure Mobility Client 2.3.2016Cisco Anyconnect Secure Mobility Client 2.3.254Cisco Anyconnect Secure Mobility Client 2.4Cisco Anyconnect Secure Mobility Client 2.0Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.2.128Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.4.1012Cisco Anyconnect Secure Mobility Client 3.0
NA
CVE-2012-4655
The WebLaunch feature in Cisco Secure Desktop prior to 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote malicious users to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSC...
Cisco Secure Desktop 3.4Cisco Secure Desktop 3.1.1.45Cisco Secure Desktop 3.6.3002Cisco Secure Desktop 3.2Cisco Secure Desktop 3.6Cisco Secure Desktop 3.5.2008Cisco Secure Desktop 3.4.2Cisco Secure Desktop 3.6.181Cisco Secure Desktop 3.1.1Cisco Secure Desktop 3.6.185Cisco Secure Desktop 3.1Cisco Secure Desktop 3.5.841Cisco Secure Desktop 3.4.2048Cisco Secure Desktop 3.4.1Cisco Secure Desktop 3.2.1Cisco Secure Desktop 3.5Cisco Secure Desktop 3.6.4021Cisco Secure Desktop 3.1.1.27Cisco Secure Desktop 3.1.1.33Cisco Secure Desktop 3.6.1001Cisco Secure Desktop 3.3Cisco Secure Desktop 3.6.2002
NA
CVE-2011-2040
The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) prior to 2.5.3041, and 3.0.x prior to 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote m...
Cisco Anyconnect Secure Mobility Client 2.3Cisco Anyconnect Secure Mobility Client 2.3.2016Cisco Anyconnect Secure Mobility ClientCisco Anyconnect Secure Mobility Client 2.5.2018Cisco Anyconnect Secure Mobility Client 2.5.1025Cisco Anyconnect Secure Mobility Client 3.0Cisco Anyconnect Secure Mobility Client 2.2.128Cisco Anyconnect Secure Mobility Client 2.0Cisco Anyconnect Secure Mobility Client 2.4Cisco Anyconnect Secure Mobility Client 2.4.1012Cisco Anyconnect Secure Mobility Client 2.5.2011Cisco Anyconnect Secure Mobility Client 2.5.2010Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.4.0202Cisco Anyconnect Secure Mobility Client 2.5Cisco Anyconnect Secure Mobility Client 2.5.2006Cisco Anyconnect Secure Mobility Client 2.5.2001Cisco Anyconnect Secure Mobility Client 2.2.136Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.3.254
7.5
CVSSv3
CVE-2016-2180
The TS_OBJ_print_bio function in crypto/ts/ts_lib.c in the X.509 Public Key Infrastructure Time-Stamp Protocol (TSP) implementation in OpenSSL up to and including 1.0.2h allows remote malicious users to cause a denial of service (out-of-bounds read and application crash) via a cr...
Openssl Openssl 1.0.1mOpenssl Openssl 1.0.2aOpenssl Openssl 1.0.1jOpenssl Openssl 1.0.1hOpenssl Openssl 1.0.2eOpenssl Openssl 1.0.1rOpenssl Openssl 1.0.2bOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.2gOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.2hOpenssl Openssl 1.0.1dOpenssl Openssl 1.0.1tOpenssl Openssl 1.0.2cOpenssl Openssl 1.0.1pOpenssl Openssl 1.0.1kOpenssl Openssl 1.0.1bOpenssl Openssl 1.0.1nOpenssl Openssl 1.0.1qOpenssl Openssl 1.0.1eOpenssl Openssl 1.0.1l
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook