CVE-2015-4263: Exposure of Sensitive Information to an Unauthorized Actor

The Control and Provisioning functionality in Cisco Mobility Services Engine MSE 10.00.1 allows remote authenticated users to obtain sensitive information by reading log files, aka Bug ID CSCut36851...

Cisco AnyConnect Secure Mobility Client Privilege Setting Vulnerability

The Cisco AnyConnect Secure Mobility Client is a suite of devices that enable remote users to securely connect to the Cisco ASA 5500 appliance via SSL VPN. A security vulnerability in the handling of pathnames in the Cisco AnyConnect Secure Mobility Client for Windows-based platforms allows a loc...

CVE-2015-4211

Cisco AnyConnect Secure Mobility Client on Windows has a local privilege escalation via path validation failure in the vpndownloader launcher (CMainThread::launchDownloader). A crafted DLL load path (DLL planting) and the downloader’s location bypass the intended checks, enabling a local user to ...

PT-2015-6461

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 3.160 Description The issue is related to improper pathname validation, allowing local users to gain privileges through a crafted INF file. Recommendations For Cisco AnyConnect Secure Mobility...

CVE-2015-4211: Undefined Security Weakness

Cisco AnyConnect Secure Mobility Client 3.160 on Windows does not properly validate pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCus65862...

Cisco AnyConnect Secure Mobility 2.x, 3.x, 4.x - Client DoS PoC

Cisco AnyConnect Secure Mobility Client VPN API suffers from a stack buffer overflow vulnerability when parsing large amount of bytes to the 'strHostNameOrAddress' parameter in 'ConnectVpn' function which resides in the vpnapi.dll library, resulting in memory corruption and overflow of the stack...

Cisco AnyConnect Secure Mobility Client Remote Command Execution

!-- Cisco AnyConnect Secure Mobility Client Remote Command Execution Vendor: Cisco Systems, Inc. Product web page: http://www.cisco.com Affected version: 2.x 3.0 3.0.0A90 3.1.0472 3.1.05187 3.1.06073 3.1.06078 3.1.06079 3.1.07021 3.1.08009 4.0.00013 4.0.00048 4.0.00051 4.0.02052 4.0.00057...

Cisco AnyConnect Secure Mobility Client Remote Command Execution

Summary Cisco AnyConnect Secure Mobility Solution empowers your employees to work from anywhere, on corporate laptops as well as personal mobile devices, regardless of physical location. It provides the security necessary to help keep your organization’s data safe and protected. Description The...

CVE-2015-0761

Cisco AnyConnect Secure Mobility Client before 3.18009 and 4.x before 4.02052 on Linux does not properly implement unspecified internal functions, which allows local users to obtain root privileges via crafted vpnagent options, aka Bug ID CSCus86790...

CVE-2015-0761

Cisco AnyConnect Secure Mobility Client for Linux (Linux builds affected: before 3.1(8009) and before 4.0(2052)) contains a local privilege escalation due to improper implementation of internal functions, allowing an authenticated, local attacker to obtain root privileges by crafting vpnagent opt...

CVE-2015-0761: Undefined Security Weakness

Cisco AnyConnect Secure Mobility Client before 3.18009 and 4.x before 4.02052 on Linux does not properly implement unspecified internal functions, which allows local users to obtain root privileges via crafted vpnagent options, aka Bug ID CSCus86790...

PT-2015-2768

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions prior to 3.18009 Cisco AnyConnect Secure Mobility Client versions 4.x prior to 4.02052 on Linux Description The issue is related to errors in handling functions in the Cisco AnyConnect Secure...

Cisco AnyConnect Secure Mobility Client Privilege Escalation Vulnerability

A vulnerability in the code of Cisco AnyConnect Secure Mobility Client for Linux could allow an authenticated, local attacker to elevate privileges to those of the root user. The vulnerability is due to improper implementation of some internal functions. An attacker could exploit this vulnerabili...

Design/Logic Flaw

The Posture module for Cisco Identity Services Engine ISE, as distributed in Cisco AnyConnect Secure Mobility Client 4.064, allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797...

CVE-2015-0755

The Posture module for Cisco Identity Services Engine ISE, as distributed in Cisco AnyConnect Secure Mobility Client 4.064, allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797...

PT-2015-2767

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 4.064 Description The issue is related to the Posture module in Cisco Identity Services Engine ISE distributed with Cisco AnyConnect Secure Mobility Client. It involves insufficient access contro...

CVE-2015-0755: Improper Access Control

The Posture module for Cisco Identity Services Engine ISE, as distributed in Cisco AnyConnect Secure Mobility Client 4.064, allows local users to gain privileges via unspecified commands, aka Bug ID CSCut05797...

Cisco Mobility Services Engine Password Information Disclosure Vulnerability

Cisco Mobility Services Engine is a WIFI platform that helps organizations deliver customized, location-based mobility services. A security vulnerability exists in Cisco Mobility Services Engine that allows authenticated users to read log files to obtain arbitrary user password information...

CVE-2015-0673

Cisco Mobility Services Engine MSE 8.0110.0 allows remote authenticated users to discover the passwords of arbitrary users by 1 reading log files or 2 using an unspecified GUI feature, aka Bug ID CSCut24792...

PT-2015-4800

Name of the Vulnerable Software and Affected Versions Cisco Mobility Services Engine MSE version 8.0110.0 Description The issue allows remote authenticated users to discover the passwords of arbitrary users. This can be achieved by either reading log files or using an unspecified GUI feature...