Anyconnect Secure Mobility Client Security Vulnerabilities and Issues — Anyconnect Secure Mobility Client CVE List

Lucene search

CiscoAnyconnect Secure Mobility Client

4 matches found

CVE•added 2012/08/06 5:55 p.m.•187 views

CVE-2012-2498

Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.

4CVSS6.5AI score0.00103EPSS

CVE•added 2012/08/06 5:55 p.m.•43 views

CVE-2012-2500

Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29470.

4CVSS6.4AI score0.00137EPSS

CVE•added 2012/08/06 3:55 p.m.•42 views

CVE-2012-1370

Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service (vpnagentd process crash) via a crafted packet, aka Bug ID CSCty01670.

3.5CVSS6.3AI score0.00473EPSS

CVE•added 2012/08/06 5:55 p.m.•37 views

CVE-2012-2499

The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz26985.

5.8CVSS6.4AI score0.00137EPSS