Improper input validation in Cisco Anyconnect Secure Mobility Client
CVE-2015-0664
The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.003 (24.1th percentile) — read the EPSS interpretation.
Affected products
- Cisco Anyconnect_secure_mobility_client
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)