Description
Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747.
References (1)
Core 1
Core References
Release Notes x_refsource_confirm
http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html
Scores
EPSS
0.0042
EPSS Percentile
34.4%
Details
Status
published
Products (17)
cisco/vpn_client
5.0
cisco/vpn_client
5.0.01
cisco/vpn_client
5.0.01.0600
cisco/vpn_client
5.0.2
cisco/vpn_client
5.0.02.0090
cisco/vpn_client
5.0.2.0090
cisco/vpn_client
5.0.03.0530
cisco/vpn_client
5.0.03.0560
cisco/vpn_client
5.0.04.0300
cisco/vpn_client
5.0.5
... and 7 more
Published
Sep 16, 2012
Tracked Since
Feb 18, 2026