CVE-2015-6322

Cisco AnyConnect Secure Mobility Client 2.0.0343-4.1(8) - Arbitrary File Move via IPC Channel

Title source: llm

Description

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151008-asmc

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1033785

Scores

EPSS 0.0038

EPSS Percentile 30.9%

Details

CWE

CWE-264

Status published

Products (50)

cisco/anyconnect_secure_mobility_client 2.0.0343

cisco/anyconnect_secure_mobility_client 2.1.0148

cisco/anyconnect_secure_mobility_client 2.2.0133

cisco/anyconnect_secure_mobility_client 2.2.0136

cisco/anyconnect_secure_mobility_client 2.2.0140

cisco/anyconnect_secure_mobility_client 2.3.0185

cisco/anyconnect_secure_mobility_client 2.3.0254

cisco/anyconnect_secure_mobility_client 2.3.1003

cisco/anyconnect_secure_mobility_client 2.3.2016

cisco/anyconnect_secure_mobility_client 2.4.0202

... and 40 more

Published Oct 12, 2015

Tracked Since Feb 18, 2026