Vulnerability in Cisco Anyconnect_secure_mobility_client

CVE-2011-2041

The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface i…

EPSS: 0.003 (23.2th percentile) — read the EPSS interpretation.

Affected products

Cisco Anyconnect_secure_mobility_client — versions 2.0, 2.1, 2.2
Microsoft Windows
Microsoft Windows_mobile
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (x_refsource_OSVDB, vdb-entry)
psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (vdb-entry, x_refsource_BID)