7.2

CVE-2015-6305

Exploit
Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConnect Secure Mobility Client 2.0 through 4.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by dbghelp.dll, aka Bug ID CSCuv01279.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4211.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Anyconnect Secure Mobility Client Version 2.0.0343
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.1.0.148
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.2.0133
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.2.0136
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.2.0140
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.3.0185
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.3.0254
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.3.1003
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.3.2016
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.4.0202
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.4.1012
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5.0217
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5.2006
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5.2010
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5.2011
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5.2014
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5.2017
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5.2018
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5.2019
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5.3041
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5.3046
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5.3051
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5.3054
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5.3055
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 2.5_base
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.0.0629
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.0.1047
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.0.2052
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.0.3050
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.0.3054
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.0.4235
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.0.5075
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.0.5080
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.0.09231
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.0.09266
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.0.09353
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.1.02043
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.1.05182
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.1.05187
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.1.06073
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 3.1.07021
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 4.0.00048
   Microsoft ≫ Windows
Cisco ≫ Anyconnect Secure Mobility Client Version 4.0.00051
   Microsoft ≫ Windows
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.2% 0.642
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CWE-426 Untrusted Search Path

The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.

http://packetstormsecurity.com/files/133876/Cisco-AnyConnect-Secure-Mobility-Client-3.1.08009-Privilege-Elevation.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2015/Sep/80
Third Party Advisory
VDB Entry
http://tools.cisco.com/security/center/viewAlert.x?alertId=41136
Vendor Advisory
http://www.securitytracker.com/id/1033643
Third Party Advisory
VDB Entry
https://code.google.com/p/google-security-research/issues/detail?id=460
Vendor Advisory
Exploit
https://www.exploit-db.com/exploits/38289/
Third Party Advisory
Exploit
VDB Entry