Code injection

2013-04-1110:55:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153.

CPENameOperatorVersion
anyconnect_secure_mobility_clienteq2.5.3046
anyconnect_secure_mobility_clienteq2.5.3041
anyconnect_secure_mobility_clienteq2.4.4004
anyconnect_secure_mobility_clienteq2.5.2017
anyconnect_secure_mobility_clienteq3.0
anyconnect_secure_mobility_clienteq3.0.5080
anyconnect_secure_mobility_clienteq2.4
anyconnect_secure_mobility_clienteq2.5.2001
anyconnect_secure_mobility_clienteq3.0.5075
anyconnect_secure_mobility_clienteq2.4.4014

Name	Operator	Version
anyconnect_secure_mobility_client	eq	2.5.3046
anyconnect_secure_mobility_client	eq	2.5.3041
anyconnect_secure_mobility_client	eq	2.4.4004
anyconnect_secure_mobility_client	eq	2.5.2017
anyconnect_secure_mobility_client	eq	3.0
anyconnect_secure_mobility_client	eq	3.0.5080
anyconnect_secure_mobility_client	eq	2.4
anyconnect_secure_mobility_client	eq	2.5.2001
anyconnect_secure_mobility_client	eq	3.0.5075
anyconnect_secure_mobility_client	eq	2.4.4014