Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2015-6322

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.

Published

2015-10-12T10:59:10.320

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.6 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:N/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

9.2

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application cisco anyconnect_secure_mobility_client 2.0.0343 Yes
Application cisco anyconnect_secure_mobility_client 2.1.0148 Yes
Application cisco anyconnect_secure_mobility_client 2.2.0133 Yes
Application cisco anyconnect_secure_mobility_client 2.2.0136 Yes
Application cisco anyconnect_secure_mobility_client 2.2.0140 Yes
Application cisco anyconnect_secure_mobility_client 2.3.0185 Yes
Application cisco anyconnect_secure_mobility_client 2.3.0254 Yes
Application cisco anyconnect_secure_mobility_client 2.3.1003 Yes
Application cisco anyconnect_secure_mobility_client 2.3.2016 Yes
Application cisco anyconnect_secure_mobility_client 2.4.0202 Yes
Application cisco anyconnect_secure_mobility_client 2.4.1012 Yes
Application cisco anyconnect_secure_mobility_client 2.5.0217 Yes
Application cisco anyconnect_secure_mobility_client 2.5.2006 Yes
Application cisco anyconnect_secure_mobility_client 2.5.2010 Yes
Application cisco anyconnect_secure_mobility_client 2.5.2011 Yes
Application cisco anyconnect_secure_mobility_client 2.5.2014 Yes
Application cisco anyconnect_secure_mobility_client 2.5.2017 Yes
Application cisco anyconnect_secure_mobility_client 2.5.2018 Yes
Application cisco anyconnect_secure_mobility_client 2.5.2019 Yes
Application cisco anyconnect_secure_mobility_client 2.5.3041 Yes
Application cisco anyconnect_secure_mobility_client 2.5.3046 Yes
Application cisco anyconnect_secure_mobility_client 2.5.3051 Yes
Application cisco anyconnect_secure_mobility_client 2.5.3054 Yes
Application cisco anyconnect_secure_mobility_client 2.5.3055 Yes
Application cisco anyconnect_secure_mobility_client 2.5_base Yes
Application cisco anyconnect_secure_mobility_client 3.0.0 Yes
Application cisco anyconnect_secure_mobility_client 3.0.0629 Yes
Application cisco anyconnect_secure_mobility_client 3.0.1047 Yes
Application cisco anyconnect_secure_mobility_client 3.0.2052 Yes
Application cisco anyconnect_secure_mobility_client 3.0.3050 Yes
Application cisco anyconnect_secure_mobility_client 3.0.3054 Yes
Application cisco anyconnect_secure_mobility_client 3.0.4235 Yes
Application cisco anyconnect_secure_mobility_client 3.0.5075 Yes
Application cisco anyconnect_secure_mobility_client 3.0.5080 Yes
Application cisco anyconnect_secure_mobility_client 3.0.09231 Yes
Application cisco anyconnect_secure_mobility_client 3.0.09266 Yes
Application cisco anyconnect_secure_mobility_client 3.0.09353 Yes
Application cisco anyconnect_secure_mobility_client 3.1\(60\) Yes
Application cisco anyconnect_secure_mobility_client 3.1.0 Yes
Application cisco anyconnect_secure_mobility_client 3.1.02043 Yes
Application cisco anyconnect_secure_mobility_client 3.1.05182 Yes
Application cisco anyconnect_secure_mobility_client 3.1.05187 Yes
Application cisco anyconnect_secure_mobility_client 3.1.06073 Yes
Application cisco anyconnect_secure_mobility_client 3.1.07021 Yes
Application cisco anyconnect_secure_mobility_client 4.0\(48\) Yes
Application cisco anyconnect_secure_mobility_client 4.0\(64\) Yes
Application cisco anyconnect_secure_mobility_client 4.0\(2049\) Yes
Application cisco anyconnect_secure_mobility_client 4.0.0 Yes
Application cisco anyconnect_secure_mobility_client 4.0.00048 Yes
Application cisco anyconnect_secure_mobility_client 4.0.00051 Yes
Application cisco anyconnect_secure_mobility_client 4.1\(8\) Yes
Application cisco anyconnect_secure_mobility_client 4.1.0 Yes
References