cisco anyconnect secure mobility client 4.0.00048 vulnerabilities and exploits

(subscribe to this query)

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local malicious user to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSC...

Cisco Anyconnect Secure Mobility Client 3.1\\(60\\)Cisco Anyconnect Secure Mobility Client 4.0\\(64\\)Cisco Anyconnect Secure Mobility Client 4.0.00048 Cisco Anyconnect Secure Mobility Client 3.1.05187 Cisco Anyconnect Secure Mobility Client 3.1.06073 Cisco Anyconnect Secure Mobility Client 4.0.00051 Cisco Anyconnect Secure Mobility Client 4.0\\(48\\)Cisco Anyconnect Secure Mobility Client 4.3.00748 Cisco Anyconnect Secure Mobility Client 4.1\\(8\\)Cisco Anyconnect Secure Mobility Client 4.3.01095 Cisco Anyconnect Secure Mobility Client 4.2.04039 Cisco Anyconnect Secure Mobility Client 3.1.07021 Cisco Anyconnect Secure Mobility Client 4.0\\(2049\\)Cisco Anyconnect Secure Mobility Client 3.1.05182 Cisco Anyconnect Secure Mobility Client 3.1.02043 Cisco Anyconnect Secure Mobility Client 4.1.0 Cisco Anyconnect Secure Mobility Client 4.0.0 Cisco Anyconnect Secure Mobility Client 4.2.0 Cisco Anyconnect Secure Mobility Client 3.1.0 Cisco Anyconnect Secure Mobility Client 4.3.0

1 Github repository

A vulnerability in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows could allow an unauthenticated, local malicious user to open Internet Explorer with the privileges of the SYSTEM user. The vulnerability is due to insufficient i...

Cisco Anyconnect Secure Mobility Client 4.1.08005 Cisco Anyconnect Secure Mobility Client 4.2.04039 Cisco Anyconnect Secure Mobility Client 4.0.00052 Cisco Anyconnect Secure Mobility Client 4.0.00061 Cisco Anyconnect Secure Mobility Client 4.2.00096 Cisco Anyconnect Secure Mobility Client 4.2.01022 Cisco Anyconnect Secure Mobility Client 4.3.00748 Cisco Anyconnect Secure Mobility Client 4.3.01095 Cisco Anyconnect Secure Mobility Client 4.2.05015 Cisco Anyconnect Secure Mobility Client 4.2.06014 Cisco Anyconnect Secure Mobility Client 4.0.00057 Cisco Anyconnect Secure Mobility Client 4.0.00048 Cisco Anyconnect Secure Mobility Client 4.1.00028 Cisco Anyconnect Secure Mobility Client 4.1.02011 Cisco Anyconnect Secure Mobility Client 4.2.01035 Cisco Anyconnect Secure Mobility Client 4.2.02075 Cisco Anyconnect Secure Mobility Client 4.3.02039 Cisco Anyconnect Secure Mobility Client 4.3.03086 Cisco Anyconnect Secure Mobility Client 4.1.04011 Cisco Anyconnect Secure Mobility Client 4.1.06013 Cisco Anyconnect Secure Mobility Client 4.1.06020 Cisco Anyconnect Secure Mobility Client 4.2.03013

1 EDB exploit

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 up to and including 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.

Cisco Anyconnect Secure Mobility Client 2.3.0254 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client 2.5.2011 Cisco Anyconnect Secure Mobility Client 2.5.2017 Cisco Anyconnect Secure Mobility Client 2.5.3051 Cisco Anyconnect Secure Mobility Client 2.5.3055 Cisco Anyconnect Secure Mobility Client 3.0.4235 Cisco Anyconnect Secure Mobility Client 3.0.5080 Cisco Anyconnect Secure Mobility Client 3.1.05187 Cisco Anyconnect Secure Mobility Client 3.1.07021 Cisco Anyconnect Secure Mobility Client 4.0\\(64\\)Cisco Anyconnect Secure Mobility Client 4.0\\(2049\\)Cisco Anyconnect Secure Mobility Client 2.4.1012 Cisco Anyconnect Secure Mobility Client 2.5 Base Cisco Anyconnect Secure Mobility Client 2.5.0217 Cisco Anyconnect Secure Mobility Client 2.5.2006 Cisco Anyconnect Secure Mobility Client 3.0.0629 Cisco Anyconnect Secure Mobility Client 3.0.1047 Cisco Anyconnect Secure Mobility Client 3.0.2052 Cisco Anyconnect Secure Mobility Client 3.0.3050 Cisco Anyconnect Secure Mobility Client 3.1\\(60\\)Cisco Anyconnect Secure Mobility Client 4.0.0

Cisco AnyConnect Secure Mobility Client prior to 4.2.05015 and 4.3.x prior to 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464.

Cisco Anyconnect Secure Mobility Client 2.5.2006 Cisco Anyconnect Secure Mobility Client 2.5.2011 Cisco Anyconnect Secure Mobility Client 3.0.1047 Cisco Anyconnect Secure Mobility Client 2.0.0343 Cisco Anyconnect Secure Mobility Client 2.3.0185 Cisco Anyconnect Secure Mobility Client 2.3.1003 Cisco Anyconnect Secure Mobility Client 2.4.1012 Cisco Anyconnect Secure Mobility Client 3.0.3054 Cisco Anyconnect Secure Mobility Client 3.0.09266 Cisco Anyconnect Secure Mobility Client 3.1.05182 Cisco Anyconnect Secure Mobility Client 4.0\\(64\\)Cisco Anyconnect Secure Mobility Client 3.1.07021 Cisco Anyconnect Secure Mobility Client 4.0\\(2049\\)Cisco Anyconnect Secure Mobility Client 4.2.04039 Cisco Anyconnect Secure Mobility Client 4.3.00748 Cisco Anyconnect Secure Mobility Client 2.5.2017 Cisco Anyconnect Secure Mobility Client 2.5.2018 Cisco Anyconnect Secure Mobility Client 2.5.2019 Cisco Anyconnect Secure Mobility Client 2.5.3041 Cisco Anyconnect Secure Mobility Client 2.5.3046 Cisco Anyconnect Secure Mobility Client 2.5.3051 Cisco Anyconnect Secure Mobility Client 2.5.3054

Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConnect Secure Mobility Client 2.0 up to and including 4.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, ...

Cisco Anyconnect Secure Mobility Client 2.1.0.148 Cisco Anyconnect Secure Mobility Client 2.2.0136 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client 2.4.1012 Cisco Anyconnect Secure Mobility Client 2.5.2017 Cisco Anyconnect Secure Mobility Client 2.5.2019 Cisco Anyconnect Secure Mobility Client 3.0.0629 Cisco Anyconnect Secure Mobility Client 3.0.2052 Cisco Anyconnect Secure Mobility Client 3.0.5080 Cisco Anyconnect Secure Mobility Client 3.0.09266 Cisco Anyconnect Secure Mobility Client 3.1.07021 Cisco Anyconnect Secure Mobility Client 4.0.0 Cisco Anyconnect Secure Mobility Client 2.5.0217 Cisco Anyconnect Secure Mobility Client 2.5.2006 Cisco Anyconnect Secure Mobility Client 2.5.2010 Cisco Anyconnect Secure Mobility Client 2.5.2011 Cisco Anyconnect Secure Mobility Client 3.0.3050 Cisco Anyconnect Secure Mobility Client 3.0.3054 Cisco Anyconnect Secure Mobility Client 3.0.4235 Cisco Anyconnect Secure Mobility Client 3.0.5075 Cisco Anyconnect Secure Mobility Client 4.0.00048 Cisco Anyconnect Secure Mobility Client 4.0.00051

1 EDB exploit1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook