Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-2040
HistoryJun 02, 2011 - 7:55 p.m.

CVE-2011-2040

2011-06-0219:55:04
CWE-20
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.058 Low

EPSS

Percentile

93.4%

JSON

The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a Java applet, aka Bug ID CSCsy05934.

Affected configurations

NVD
Node
ciscoanyconnect_secure_mobility_clientRange≀2.5.2019
OR
ciscoanyconnect_secure_mobility_clientMatch2.0
OR
ciscoanyconnect_secure_mobility_clientMatch2.1
OR
ciscoanyconnect_secure_mobility_clientMatch2.2
OR
ciscoanyconnect_secure_mobility_clientMatch2.2.128
OR
ciscoanyconnect_secure_mobility_clientMatch2.2.133
OR
ciscoanyconnect_secure_mobility_clientMatch2.2.136
OR
ciscoanyconnect_secure_mobility_clientMatch2.2.140
OR
ciscoanyconnect_secure_mobility_clientMatch2.3
OR
ciscoanyconnect_secure_mobility_clientMatch2.3.185
OR
ciscoanyconnect_secure_mobility_clientMatch2.3.254
OR
ciscoanyconnect_secure_mobility_clientMatch2.3.2016
OR
ciscoanyconnect_secure_mobility_clientMatch2.4
OR
ciscoanyconnect_secure_mobility_clientMatch2.4.0202
OR
ciscoanyconnect_secure_mobility_clientMatch2.4.1012
OR
ciscoanyconnect_secure_mobility_clientMatch2.5
OR
ciscoanyconnect_secure_mobility_clientMatch2.5.1025
OR
ciscoanyconnect_secure_mobility_clientMatch2.5.2001
OR
ciscoanyconnect_secure_mobility_clientMatch2.5.2006
OR
ciscoanyconnect_secure_mobility_clientMatch2.5.2010
OR
ciscoanyconnect_secure_mobility_clientMatch2.5.2011
OR
ciscoanyconnect_secure_mobility_clientMatch2.5.2014
OR
ciscoanyconnect_secure_mobility_clientMatch2.5.2017
OR
ciscoanyconnect_secure_mobility_clientMatch2.5.2018
OR
ciscoanyconnect_secure_mobility_clientMatch3.0
AND
applemac_os_x
OR
linuxlinux_kernel

Related

cve 1
prion 1
d2 1
cvelist 1
nessus 1
cert 1
seebug 1
securityvulns 2
cve
cve
CVE-2011-2040
2011-06-02 19:55:04
prion
prion
Design/Logic Flaw
2011-06-02 19:55:00
d2
d2
DSquare Exploit Pack: D2SEC_CISCOANY
2011-06-02 19:55:00
cvelist
cvelist
CVE-2011-2040
2011-06-02 19:00:00
nessus
nessus
Mac OS X : Cisco AnyConnect Secure Mobility Client 2.x / 3.x < 3.0(629) Multiple Vulnerabilities
2013-12-16 00:00:00
cert
cert
Cisco AnyConnect SSL VPN arbitrary code execution
2011-06-07 00:00:00
seebug
seebug
Cisco AnyConnect Secure Mobility Clientδ»»ζ„δ»£η ζ‰§θ‘ŒεŠζœ¬εœ°η‰Ήζƒζε‡ζΌζ΄ž
2011-06-04 00:00:00
securityvulns
securityvulns
Cisco Security Advisory: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
2011-06-02 00:00:00
Cisco AnyConnect Secure Mobility Client security vulnerabilities
2011-06-03 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.058 Low

EPSS

Percentile

93.4%

JSON
Related for NVD:CVE-2011-2040
cve1prion1d21cvelist1nessus1cert1seebug1securityvulns2