CVE-2012-2495

2012-06-2020:55:00

CWE-20

[email protected]

web.nvd.nist.gov

cisco

anyconnect

secure mobility client

version downgrade

security vulnerability

6.7 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

45.6%

JSON

The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote attackers to force a version downgrade by using (1) ActiveX or (2) Java components to offer signed code that corresponds to an older software release, aka Bug ID CSCtx74235.

CPENameOperatorVersion
cisco:secure_desktopcisco secure desktopeq3.1.1.33
cisco:secure_desktopcisco secure desktople3.5.2008
cisco:secure_desktopcisco secure desktopeq3.5
cisco:anyconnect_secure_mobility_clientcisco anyconnect secure mobility clienteq3.0
cisco:secure_desktopcisco secure desktopeq3.3
cisco:secure_desktopcisco secure desktopeq3.1.1.45
cisco:secure_desktopcisco secure desktopeq3.4.2048
cisco:secure_desktopcisco secure desktopeq3.1.1
cisco:secure_desktopcisco secure desktopeq3.5.841
cisco:secure_desktopcisco secure desktopeq3.2

CPE	Name	Operator	Version
cisco:secure_desktop	cisco secure desktop	eq	3.1.1.33
cisco:secure_desktop	cisco secure desktop	le	3.5.2008
cisco:secure_desktop	cisco secure desktop	eq	3.5
cisco:anyconnect_secure_mobility_client	cisco anyconnect secure mobility client	eq	3.0
cisco:secure_desktop	cisco secure desktop	eq	3.3
cisco:secure_desktop	cisco secure desktop	eq	3.1.1.45
cisco:secure_desktop	cisco secure desktop	eq	3.4.2048
cisco:secure_desktop	cisco secure desktop	eq	3.1.1
cisco:secure_desktop	cisco secure desktop	eq	3.5.841
cisco:secure_desktop	cisco secure desktop	eq	3.2