Lucene search
HistoryMar 17, 2015 - 2:01 a.m.
CVE-2015-0665
cisco
anyconnect
secure mobility client
hostscan
cve-2015-0665
nvd
bug id cscus79173
6.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.9%
The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173.
Affected configurations
Node
ciscoanyconnect_secure_mobility_clientRange≤4.0\(.00051\)
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:anyconnect_secure_mobility_client | cisco anyconnect secure mobility client | le | 4.0\(.00051\) |
Related
prion
prion
Code injection
2015-03-17 02:01:00
cisco
cisco
cvelist
cvelist
CVE-2015-0665
2015-03-17 01:00:00
nvd
nvd
CVE-2015-0665
2015-03-17 02:01:49
nessus
nessus
kaspersky
kaspersky
KLA10482 Multiple vulnerabilities in Cisco AnyConnect SMC
2015-03-17 00:00:00
6.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.9%
Related for CVE-2015-0665