Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

cisco anyconnect secure mobility client 2.4 vulnerabilities and exploits

(subscribe to this query)
9.3
CVSSv2

CVE-2011-2040

The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) prior to 2.5.3041, and 3.0.x prior to 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote m...
Cisco Anyconnect Secure Mobility ClientCisco Anyconnect Secure Mobility Client 2.0Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.2.128Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.2.136Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.3Cisco Anyconnect Secure Mobility Client 2.3.185Cisco Anyconnect Secure Mobility Client 2.3.254Cisco Anyconnect Secure Mobility Client 2.3.2016
6.8
CVSSv2

CVE-2013-5559

Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote malicious users to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.
Cisco Anyconnect Secure Mobility Client 2.0Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.2.128Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.2.136Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.3Cisco Anyconnect Secure Mobility Client 2.3.185Cisco Anyconnect Secure Mobility Client 2.3.254Cisco Anyconnect Secure Mobility Client 2.3.2016Cisco Anyconnect Secure Mobility Client 2.4
6.6
CVSSv2

CVE-2013-1172

The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153.
Cisco Anyconnect Secure Mobility Client -Cisco Anyconnect Secure Mobility Client 2.0Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.2.128Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.2.136Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.3Cisco Anyconnect Secure Mobility Client 2.3.185Cisco Anyconnect Secure Mobility Client 2.3.254Cisco Anyconnect Secure Mobility Client 2.3.2016
6.6
CVSSv2

CVE-2013-1173

Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143.
Cisco Anyconnect Secure Mobility Client -Cisco Anyconnect Secure Mobility Client 2.0Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.2.128Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.2.136Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.3Cisco Anyconnect Secure Mobility Client 2.3.185Cisco Anyconnect Secure Mobility Client 2.3.254Cisco Anyconnect Secure Mobility Client 2.3.2016
9.3
CVSSv2

CVE-2012-2493

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x prior to 2.5 MR6 on Windows, and 2.x prior to 2.5 MR6 and 3.x prior to 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader ...
Cisco Anyconnect Secure Mobility Client 2.0Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.2.128Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.2.136Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.3Cisco Anyconnect Secure Mobility Client 2.3.185Cisco Anyconnect Secure Mobility Client 2.3.254Cisco Anyconnect Secure Mobility Client 2.3.2016Cisco Anyconnect Secure Mobility Client 2.4
4.3
CVSSv2

CVE-2012-2494

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x prior to 2.5 MR6 and 3.x prior to 3.0 MR8 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote malicious users to fo...
Cisco Anyconnect Secure Mobility Client 2.0Cisco Anyconnect Secure Mobility Client 2.1Cisco Anyconnect Secure Mobility Client 2.2Cisco Anyconnect Secure Mobility Client 2.2.128Cisco Anyconnect Secure Mobility Client 2.2.133Cisco Anyconnect Secure Mobility Client 2.2.136Cisco Anyconnect Secure Mobility Client 2.2.140Cisco Anyconnect Secure Mobility Client 2.3Cisco Anyconnect Secure Mobility Client 2.3.185Cisco Anyconnect Secure Mobility Client 2.3.254Cisco Anyconnect Secure Mobility Client 2.3.2016Cisco Anyconnect Secure Mobility Client 2.4
6.5
CVSSv3

CVE-2018-0229

A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication for Cisco AnyConnect Secure Mobility Client for Desktop Platforms, Cisco Adaptive Security Appliance (ASA) Software, and Cisco Firepower Threat Defense (FTD) Sof...
Cisco Anyconnect Secure Mobility Client 4.6(200)Cisco Adaptive Security Appliance Software 9.8(1.245)
4.3
CVSSv2

CVE-2015-1788

The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL prior to 0.9.8s, 1.0.0 prior to 1.0.0e, 1.0.1 prior to 1.0.1n, and 1.0.2 prior to 1.0.2b does not properly handle ECParameters structures in which the curve is over a malformed binary polynomial field, which allows re...
Openssl OpensslOpenssl Openssl 1.0.0Openssl Openssl 1.0.0aOpenssl Openssl 1.0.0bOpenssl Openssl 1.0.0cOpenssl Openssl 1.0.0dOpenssl Openssl 1.0.0eOpenssl Openssl 1.0.0fOpenssl Openssl 1.0.0gOpenssl Openssl 1.0.0hOpenssl Openssl 1.0.0iOpenssl Openssl 1.0.0j
6.8
CVSSv3

CVE-2017-13084

Wi-Fi Protected Access (WPA and WPA2) allows reinstallation of the Station-To-Station-Link (STSL) Transient Key (STK) during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames.
Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 17.04Debian Debian Linux 8.0Debian Debian Linux 9.0Freebsd FreebsdFreebsd Freebsd 10Freebsd Freebsd 10.4Freebsd Freebsd 11Freebsd Freebsd 11.1Opensuse Leap 42.2Opensuse Leap 42.3
5.3
CVSSv3

CVE-2017-13079

Wi-Fi Protected Access (WPA and WPA2) that supports IEEE 802.11w allows reinstallation of the Integrity Group Temporal Key (IGTK) during the four-way handshake, allowing an attacker within radio range to spoof frames from access points to clients.
Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 17.04Debian Debian Linux 8.0Debian Debian Linux 9.0Freebsd FreebsdFreebsd Freebsd 10Freebsd Freebsd 10.4Freebsd Freebsd 11Freebsd Freebsd 11.1Opensuse Leap 42.2Opensuse Leap 42.3
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2024-50264CVE-2025-43703wpwebmass assignmentCVE-2025-32817CVE-2025-27840CVE-2025-32844information disclosureCVE-2025-31338woocommerce social loginsonicwallavblocal
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook