CVE-2011-2040
The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 10.7%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a Java applet, aka Bug ID CSCsy05934.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 10.68% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- cisco/anyconnect secure mobility client
- Source
- psirt@cisco.com
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=910
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtmlVendor Advisory
- http://www.kb.cert.org/vuls/id/490097US Government Resource
- http://www.securitytracker.com/id?1025591
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67739
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=910
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtmlVendor Advisory
- http://www.kb.cert.org/vuls/id/490097US Government Resource
- http://www.securitytracker.com/id?1025591
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67739
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.