VendorsCiscoanyconnect_secure_mobility_client3.0.07059
Vulnerabilities

Cisco AnyConnect Secure Mobility Client 3.0.07059

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2013-1172
The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153.
Published 2013-04-11 · Modified
6.6EPSS 0.003
CVE-2013-1173
Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143.
Published 2013-04-11 · Modified
6.6EPSS 0.003
CVE-2012-2499
The IPsec implementation in Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz26985.
Published 2012-08-06 · Modified
5.8EPSS 0.005
CVE-2012-2498
Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.
Published 2012-08-06 · Modified
4.0EPSS 0.005
CVE-2012-2500
Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 does not verify the certificate name in an X.509 certificate during WebLaunch of IPsec, which allows man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29470.
Published 2012-08-06 · Modified
4.0EPSS 0.005
CVE-2012-1370
Cisco AnyConnect Secure Mobility Client 3.0 before 3.0.08057 allows remote authenticated users to cause a denial of service (vpnagentd process crash) via a crafted packet, aka Bug ID CSCty01670.
Published 2012-08-06 · Modified
3.5EPSS 0.011