cisco anyconnect secure mobility client 3.0 vulnerabilities and exploits

(subscribe to this query)

Cisco AnyConnect Secure Mobility Client 3.0 up to and including 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle malicious users to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.

Cisco Anyconnect Secure Mobility Client 3.0 Cisco Anyconnect Secure Mobility Client 3.0.0629 Cisco Anyconnect Secure Mobility Client 3.0.07059 Cisco Anyconnect Secure Mobility Client 3.0.08057 Cisco Anyconnect Secure Mobility Client 3.0.08066

The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 prior to 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle malicious users to spoof servers via a crafted certificate, aka Bug ID CSCtz26985.

Cisco Anyconnect Secure Mobility Client 3.0 Cisco Anyconnect Secure Mobility Client 3.0.0629 Cisco Anyconnect Secure Mobility Client 3.0.07059

Cisco AnyConnect Secure Mobility Client 3.0 prior to 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle malicious users to spoof servers via a crafted certificate, aka Bug ID CSCtz29470.

Cisco Anyconnect Secure Mobility Client 3.0 Cisco Anyconnect Secure Mobility Client 3.0.0629 Cisco Anyconnect Secure Mobility Client 3.0.07059

Cisco AnyConnect Secure Mobility Client 3.0 prior to 3.0.08057 allows remote authenticated users to cause a denial of service (vpnagentd process crash) via a crafted packet, aka Bug ID CSCty01670.

Cisco Anyconnect Secure Mobility Client 3.0 Cisco Anyconnect Secure Mobility Client 3.0.0629 Cisco Anyconnect Secure Mobility Client 3.0.07059

The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) prior to 2.5.3041, and 3.0.x prior to 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote m...

Cisco Anyconnect Secure Mobility Client Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.2.128 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.3 Cisco Anyconnect Secure Mobility Client 2.3.185 Cisco Anyconnect Secure Mobility Client 2.3.254 Cisco Anyconnect Secure Mobility Client 2.3.2016

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x prior to 2.5 MR6 on Windows, and 2.x prior to 2.5 MR6 and 3.x prior to 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader ...

Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.2.128 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.3 Cisco Anyconnect Secure Mobility Client 2.3.185 Cisco Anyconnect Secure Mobility Client 2.3.254 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client 2.4

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x prior to 2.5 MR6 and 3.x prior to 3.0 MR8 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote malicious users to fo...

Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.2.128 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.3 Cisco Anyconnect Secure Mobility Client 2.3.185 Cisco Anyconnect Secure Mobility Client 2.3.254 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client 2.4

The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153.

Cisco Anyconnect Secure Mobility Client -Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.2.128 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.3 Cisco Anyconnect Secure Mobility Client 2.3.185 Cisco Anyconnect Secure Mobility Client 2.3.254 Cisco Anyconnect Secure Mobility Client 2.3.2016

Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143.

Cisco Anyconnect Secure Mobility Client -Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.2.128 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.3 Cisco Anyconnect Secure Mobility Client 2.3.185 Cisco Anyconnect Secure Mobility Client 2.3.254 Cisco Anyconnect Secure Mobility Client 2.3.2016

Cisco AnyConnect on Android and OS X does not properly verify the host type, which allows remote malicious users to spoof authentication forms and possibly capture credentials via unspecified vectors, aka Bug IDs CSCuo24931 and CSCuo24940.

Cisco Anyconnect Secure Mobility Client

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook