CVE-2015-0663

Cisco AnyConnect Secure Mobility Client < 4.0(.00051) - Arbitrary File Write via IPC Message

Title source: llm
STIX 2.1

Description

Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=37863
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1031930

Scores

EPSS 0.0034
EPSS Percentile 26.0%

Details

CWE
CWE-264
Status published
Products (1)
cisco/anyconnect_secure_mobility_client < 4.0\(.00051\)
Published Mar 17, 2015
Tracked Since Feb 18, 2026