Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco anyconnect secure mobility client 4.0.0 vulnerabilities and exploits

(subscribe to this query)
7.8
CVSSv3
CVE-2016-9192
A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local malicious user to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSC...
Cisco Anyconnect Secure Mobility Client 3.1\\(60\\)Cisco Anyconnect Secure Mobility Client 4.0\\(64\\)Cisco Anyconnect Secure Mobility Client 4.0.00048Cisco Anyconnect Secure Mobility Client 3.1.05187Cisco Anyconnect Secure Mobility Client 3.1.06073Cisco Anyconnect Secure Mobility Client 4.0.00051Cisco Anyconnect Secure Mobility Client 4.0\\(48\\)Cisco Anyconnect Secure Mobility Client 4.3.00748Cisco Anyconnect Secure Mobility Client 4.1\\(8\\)Cisco Anyconnect Secure Mobility Client 4.3.01095Cisco Anyconnect Secure Mobility Client 4.2.04039Cisco Anyconnect Secure Mobility Client 3.1.07021Cisco Anyconnect Secure Mobility Client 4.0\\(2049\\)Cisco Anyconnect Secure Mobility Client 3.1.05182Cisco Anyconnect Secure Mobility Client 3.1.02043Cisco Anyconnect Secure Mobility Client 4.1.0Cisco Anyconnect Secure Mobility Client 4.0.0Cisco Anyconnect Secure Mobility Client 4.2.0Cisco Anyconnect Secure Mobility Client 3.1.0Cisco Anyconnect Secure Mobility Client 4.3.0
NA
CVE-2015-6322
The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 up to and including 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.
Cisco Anyconnect Secure Mobility Client 2.3.0254Cisco Anyconnect Secure Mobility Client 2.3.2016Cisco Anyconnect Secure Mobility Client 2.5.2011Cisco Anyconnect Secure Mobility Client 2.5.2017Cisco Anyconnect Secure Mobility Client 2.5.3051Cisco Anyconnect Secure Mobility Client 2.5.3055Cisco Anyconnect Secure Mobility Client 3.0.4235Cisco Anyconnect Secure Mobility Client 3.0.5080Cisco Anyconnect Secure Mobility Client 3.1.05187Cisco Anyconnect Secure Mobility Client 3.1.07021Cisco Anyconnect Secure Mobility Client 4.0\\(64\\)Cisco Anyconnect Secure Mobility Client 4.0\\(2049\\)Cisco Anyconnect Secure Mobility Client 2.4.1012Cisco Anyconnect Secure Mobility Client 2.5 BaseCisco Anyconnect Secure Mobility Client 2.5.0217Cisco Anyconnect Secure Mobility Client 2.5.2006Cisco Anyconnect Secure Mobility Client 3.0.0629Cisco Anyconnect Secure Mobility Client 3.0.1047Cisco Anyconnect Secure Mobility Client 3.0.2052Cisco Anyconnect Secure Mobility Client 3.0.3050Cisco Anyconnect Secure Mobility Client 3.1\\(60\\)Cisco Anyconnect Secure Mobility Client 4.0.0
7.8
CVSSv3
CVE-2016-6369
Cisco AnyConnect Secure Mobility Client prior to 4.2.05015 and 4.3.x prior to 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464.
Cisco Anyconnect Secure Mobility Client 2.5.2006Cisco Anyconnect Secure Mobility Client 2.5.2011Cisco Anyconnect Secure Mobility Client 3.0.1047Cisco Anyconnect Secure Mobility Client 2.0.0343Cisco Anyconnect Secure Mobility Client 2.3.0185Cisco Anyconnect Secure Mobility Client 2.3.1003Cisco Anyconnect Secure Mobility Client 2.4.1012Cisco Anyconnect Secure Mobility Client 3.0.3054Cisco Anyconnect Secure Mobility Client 3.0.09266Cisco Anyconnect Secure Mobility Client 3.1.05182Cisco Anyconnect Secure Mobility Client 4.0\\(64\\)Cisco Anyconnect Secure Mobility Client 3.1.07021Cisco Anyconnect Secure Mobility Client 4.0\\(2049\\)Cisco Anyconnect Secure Mobility Client 4.2.04039Cisco Anyconnect Secure Mobility Client 4.3.00748Cisco Anyconnect Secure Mobility Client 2.5.2017Cisco Anyconnect Secure Mobility Client 2.5.2018Cisco Anyconnect Secure Mobility Client 2.5.2019Cisco Anyconnect Secure Mobility Client 2.5.3041Cisco Anyconnect Secure Mobility Client 2.5.3046Cisco Anyconnect Secure Mobility Client 2.5.3051Cisco Anyconnect Secure Mobility Client 2.5.3054
NA
CVE-2015-6305
Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConnect Secure Mobility Client 2.0 up to and including 4.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, ...
Cisco Anyconnect Secure Mobility Client 2.1.0.148Cisco Anyconnect Secure Mobility Client 2.2.0136Cisco Anyconnect Secure Mobility Client 2.3.2016Cisco Anyconnect Secure Mobility Client 2.4.1012Cisco Anyconnect Secure Mobility Client 2.5.2017Cisco Anyconnect Secure Mobility Client 2.5.2019Cisco Anyconnect Secure Mobility Client 3.0.0629Cisco Anyconnect Secure Mobility Client 3.0.2052Cisco Anyconnect Secure Mobility Client 3.0.5080Cisco Anyconnect Secure Mobility Client 3.0.09266Cisco Anyconnect Secure Mobility Client 3.1.07021Cisco Anyconnect Secure Mobility Client 4.0.0Cisco Anyconnect Secure Mobility Client 2.5.0217Cisco Anyconnect Secure Mobility Client 2.5.2006Cisco Anyconnect Secure Mobility Client 2.5.2010Cisco Anyconnect Secure Mobility Client 2.5.2011Cisco Anyconnect Secure Mobility Client 3.0.3050Cisco Anyconnect Secure Mobility Client 3.0.3054Cisco Anyconnect Secure Mobility Client 3.0.4235Cisco Anyconnect Secure Mobility Client 3.0.5075Cisco Anyconnect Secure Mobility Client 4.0.00048Cisco Anyconnect Secure Mobility Client 4.0.00051
NA
CVE-2015-0207
The dtls1_listen function in d1_lib.c in OpenSSL 1.0.2 prior to 1.0.2a does not properly isolate the state information of independent data streams, which allows remote malicious users to cause a denial of service (application crash) via crafted DTLS traffic, as demonstrated by DT...
Openssl Openssl 1.0.2
NA
CVE-2015-0208
The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 prior to 1.0.2a allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via crafted RSA PSS parameters to...
Openssl Openssl 1.0.2
NA
CVE-2015-0290
The multi-block feature in the ssl3_write_bytes function in s3_pkt.c in OpenSSL 1.0.2 prior to 1.0.2a on 64-bit x86 platforms with AES NI support does not properly handle certain non-blocking I/O cases, which allows remote malicious users to cause a denial of service (pointer cor...
Openssl Openssl 1.0.2
NA
CVE-2015-0291
The sigalgs implementation in t1_lib.c in OpenSSL 1.0.2 prior to 1.0.2a allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) by using an invalid signature_algorithms extension in the ClientHello message during a renegotiation.
Openssl Openssl 1.0.2
NA
CVE-2015-1787
The ssl3_get_client_key_exchange function in s3_srvr.c in OpenSSL 1.0.2 prior to 1.0.2a, when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, allows remote malicious users to cause a denial of service (daemon crash) via a ClientKeyExchange message w...
Openssl Openssl 1.0.2
NA
CVE-2015-0209
Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL prior to 0.9.8zf, 1.0.0 prior to 1.0.0r, 1.0.1 prior to 1.0.1m, and 1.0.2 prior to 1.0.2a might allow remote malicious users to cause a denial of service (memory corruption and applica...
Openssl Openssl 1.0.1jOpenssl Openssl 1.0.0nOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.1hOpenssl Openssl 1.0.0mOpenssl Openssl 1.0.1cOpenssl Openssl 1.0.1gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0jOpenssl Openssl 1.0.0pOpenssl Openssl 1.0.1aOpenssl Openssl 1.0.0oOpenssl Openssl 1.0.1dOpenssl Openssl 1.0.0kOpenssl Openssl 1.0.1kOpenssl Openssl 1.0.0Openssl Openssl 1.0.1bOpenssl Openssl 1.0.1e
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook