CVE-2015-0662

Cisco AnyConnect Secure Mobility Client < 4.0(.00051) - Privilege Escalation via Crafted IPC Messages

Title source: llm
STIX 2.1

Description

Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to gain privileges via crafted IPC messages that trigger use of root privileges for a software-package installation, aka Bug ID CSCus79385.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=37860
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1031933

Scores

EPSS 0.0037
EPSS Percentile 29.7%

Details

CWE
CWE-264
Status published
Products (1)
cisco/anyconnect_secure_mobility_client < 4.0\(.00051\)
Published Mar 17, 2015
Tracked Since Feb 18, 2026