CVE-2011-2041

2011-06-0220:55:03

CWE-264

[email protected]

web.nvd.nist.gov

cisco

anyconnect

secure mobility client

sbl

bug id

cscta40556

cve-2011-2041

6.6 Medium

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556.

Affected configurations

NVD

Node

ciscoanyconnect_secure_mobility_clientRange≤2.3.2016

ciscoanyconnect_secure_mobility_clientMatch2.0

ciscoanyconnect_secure_mobility_clientMatch2.1

ciscoanyconnect_secure_mobility_clientMatch2.2

ciscoanyconnect_secure_mobility_clientMatch2.2.128

ciscoanyconnect_secure_mobility_clientMatch2.2.133

ciscoanyconnect_secure_mobility_clientMatch2.2.136

ciscoanyconnect_secure_mobility_clientMatch2.2.140

ciscoanyconnect_secure_mobility_clientMatch2.3

ciscoanyconnect_secure_mobility_clientMatch2.3.185

AND

microsoftwindows

microsoftwindows_mobile

CPENameOperatorVersion
cisco:anyconnect_secure_mobility_clientcisco anyconnect secure mobility clientle2.3.2016
cisco:anyconnect_secure_mobility_clientcisco anyconnect secure mobility clienteq2.0
cisco:anyconnect_secure_mobility_clientcisco anyconnect secure mobility clienteq2.1
cisco:anyconnect_secure_mobility_clientcisco anyconnect secure mobility clienteq2.2
cisco:anyconnect_secure_mobility_clientcisco anyconnect secure mobility clienteq2.2.128
cisco:anyconnect_secure_mobility_clientcisco anyconnect secure mobility clienteq2.2.133
cisco:anyconnect_secure_mobility_clientcisco anyconnect secure mobility clienteq2.2.136
cisco:anyconnect_secure_mobility_clientcisco anyconnect secure mobility clienteq2.2.140
cisco:anyconnect_secure_mobility_clientcisco anyconnect secure mobility clienteq2.3
cisco:anyconnect_secure_mobility_clientcisco anyconnect secure mobility clienteq2.3.185

CPE	Name	Operator	Version
cisco:anyconnect_secure_mobility_client	cisco anyconnect secure mobility client	le	2.3.2016
cisco:anyconnect_secure_mobility_client	cisco anyconnect secure mobility client	eq	2.0
cisco:anyconnect_secure_mobility_client	cisco anyconnect secure mobility client	eq	2.1
cisco:anyconnect_secure_mobility_client	cisco anyconnect secure mobility client	eq	2.2
cisco:anyconnect_secure_mobility_client	cisco anyconnect secure mobility client	eq	2.2.128
cisco:anyconnect_secure_mobility_client	cisco anyconnect secure mobility client	eq	2.2.133
cisco:anyconnect_secure_mobility_client	cisco anyconnect secure mobility client	eq	2.2.136
cisco:anyconnect_secure_mobility_client	cisco anyconnect secure mobility client	eq	2.2.140
cisco:anyconnect_secure_mobility_client	cisco anyconnect secure mobility client	eq	2.3
cisco:anyconnect_secure_mobility_client	cisco anyconnect secure mobility client	eq	2.3.185