cisco anyconnect secure mobility client 2.2.0136 vulnerabilities and exploits

(subscribe to this query)

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 up to and including 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.

Cisco Anyconnect Secure Mobility Client 2.0.0343 Cisco Anyconnect Secure Mobility Client 2.1.0148 Cisco Anyconnect Secure Mobility Client 2.2.0133 Cisco Anyconnect Secure Mobility Client 2.2.0136 Cisco Anyconnect Secure Mobility Client 2.2.0140 Cisco Anyconnect Secure Mobility Client 2.3.0185 Cisco Anyconnect Secure Mobility Client 2.3.0254 Cisco Anyconnect Secure Mobility Client 2.3.1003 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client 2.4.0202 Cisco Anyconnect Secure Mobility Client 2.4.1012 Cisco Anyconnect Secure Mobility Client 2.5.0217

Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConnect Secure Mobility Client 2.0 up to and including 4.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, ...

Cisco Anyconnect Secure Mobility Client 2.0.0343 Cisco Anyconnect Secure Mobility Client 2.1.0.148 Cisco Anyconnect Secure Mobility Client 2.2.0133 Cisco Anyconnect Secure Mobility Client 2.2.0136 Cisco Anyconnect Secure Mobility Client 2.2.0140 Cisco Anyconnect Secure Mobility Client 2.3.0185 Cisco Anyconnect Secure Mobility Client 2.3.0254 Cisco Anyconnect Secure Mobility Client 2.3.1003 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client 2.4.0202 Cisco Anyconnect Secure Mobility Client 2.4.1012 Cisco Anyconnect Secure Mobility Client 2.5.0217

1 EDB exploit1 Github repository

Cisco AnyConnect Secure Mobility Client prior to 4.2.05015 and 4.3.x prior to 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464.

Cisco Anyconnect Secure Mobility Client 2.0.0343 Cisco Anyconnect Secure Mobility Client 2.1.0148 Cisco Anyconnect Secure Mobility Client 2.2.0133 Cisco Anyconnect Secure Mobility Client 2.2.0136 Cisco Anyconnect Secure Mobility Client 2.2.0140 Cisco Anyconnect Secure Mobility Client 2.3.0185 Cisco Anyconnect Secure Mobility Client 2.3.0254 Cisco Anyconnect Secure Mobility Client 2.3.1003 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client 2.4.0202 Cisco Anyconnect Secure Mobility Client 2.4.1012 Cisco Anyconnect Secure Mobility Client 2.5.0217

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook