CVE-2015-0665

Cisco AnyConnect Secure Mobility Client < 4.0(.00051) - Arbitrary File Write via Hostscan IPC Messages

Title source: llm
STIX 2.1

Description

The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=37862
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1031931

Scores

EPSS 0.0039
EPSS Percentile 30.6%

Details

CWE
CWE-22
Status published
Products (1)
cisco/anyconnect_secure_mobility_client < 4.0\(.00051\)
Published Mar 17, 2015
Tracked Since Feb 18, 2026