Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2012-2493
HistoryJun 20, 2012 - 8:55 p.m.

CVE-2012-2493

2012-06-2020:55:02
CWE-20
[email protected]
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.7%

JSON

The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and Linux, does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug ID CSCtw47523.

Affected configurations

NVD
Node
ciscoanyconnect_secure_mobility_clientMatch2.0
OR
ciscoanyconnect_secure_mobility_clientMatch2.1
OR
ciscoanyconnect_secure_mobility_clientMatch2.2
OR
ciscoanyconnect_secure_mobility_clientMatch2.2.128
OR
ciscoanyconnect_secure_mobility_clientMatch2.2.133
OR
ciscoanyconnect_secure_mobility_clientMatch2.2.136
OR
ciscoanyconnect_secure_mobility_clientMatch2.2.140
OR
ciscoanyconnect_secure_mobility_clientMatch2.3
OR
ciscoanyconnect_secure_mobility_clientMatch2.3.185
OR
ciscoanyconnect_secure_mobility_clientMatch2.3.254
OR
ciscoanyconnect_secure_mobility_clientMatch2.3.2016
OR
ciscoanyconnect_secure_mobility_clientMatch2.4
OR
ciscoanyconnect_secure_mobility_clientMatch2.4.0202
OR
ciscoanyconnect_secure_mobility_clientMatch2.4.1012
OR
ciscoanyconnect_secure_mobility_clientMatch2.5
AND
microsoftwindows
Node
ciscoanyconnect_secure_mobility_clientMatch2.0
OR
ciscoanyconnect_secure_mobility_clientMatch2.1
OR
ciscoanyconnect_secure_mobility_clientMatch2.2
OR
ciscoanyconnect_secure_mobility_clientMatch2.2.128
OR
ciscoanyconnect_secure_mobility_clientMatch2.2.133
OR
ciscoanyconnect_secure_mobility_clientMatch2.2.136
OR
ciscoanyconnect_secure_mobility_clientMatch2.2.140
OR
ciscoanyconnect_secure_mobility_clientMatch2.3
OR
ciscoanyconnect_secure_mobility_clientMatch2.3.185
OR
ciscoanyconnect_secure_mobility_clientMatch2.3.254
OR
ciscoanyconnect_secure_mobility_clientMatch2.3.2016
OR
ciscoanyconnect_secure_mobility_clientMatch2.4
OR
ciscoanyconnect_secure_mobility_clientMatch2.4.0202
OR
ciscoanyconnect_secure_mobility_clientMatch2.4.1012
OR
ciscoanyconnect_secure_mobility_clientMatch2.5
OR
ciscoanyconnect_secure_mobility_clientMatch3.0
AND
applemac_os_x
OR
linuxlinux_kernel

Related

nessus 3
cvelist 1
cve 1
zdi 1
prion 1
securityvulns 2
openvas 2
cisco 1
nessus
nessus
Cisco AnyConnect Secure Mobility Client VPN Downloader RCE (cisco-sa-20120620-ac)
2012-07-02 00:00:00
MacOSX Cisco AnyConnect Secure Mobility Client Multiple Vulnerabilities
2012-07-02 00:00:00
MS 2736233: Update Rollup for ActiveX Kill Bits (2736233)
2012-09-11 00:00:00
cvelist
cvelist
CVE-2012-2493
2022-10-03 16:15:37
cve
cve
CVE-2012-2493
2022-10-03 16:15:37
zdi
zdi
Cisco AnyConnect VPN Client Arbitrary Program Instantiation Remote Code Execution Vulnerability
2012-08-22 00:00:00
prion
prion
Code injection
2012-06-20 20:55:00
securityvulns
securityvulns
ZDI-12-156 : Cisco AnyConnect VPN Client Arbitrary Program Instantiation Remote Code Execution Vulnerability
2012-08-26 00:00:00
Cisco AnyConnect Secure Mobility Client multiple security vulnerabilities
2012-08-27 00:00:00
openvas
openvas
Cisco Products ActiveX Control Multiple Vulnerabilities
2012-09-12 00:00:00
Cisco Products ActiveX Control Multiple Vulnerabilities
2012-09-12 00:00:00
cisco
cisco
Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
2012-06-20 16:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.7%

JSON
Related for NVD:CVE-2012-2493
nessus3cvelist1cve1zdi1prion1securityvulns2openvas2cisco1