7.2

CVE-2015-7600

Exploit
Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Vpn Client Version 5.0
Cisco ≫ Vpn Client Version 5.0.01
Cisco ≫ Vpn Client Version 5.0.01.0600
Cisco ≫ Vpn Client Version 5.0.2
Cisco ≫ Vpn Client Version 5.0.02.0090
Cisco ≫ Vpn Client Version 5.0.2.0090
Cisco ≫ Vpn Client Version 5.0.03.0530
Cisco ≫ Vpn Client Version 5.0.03.0560
Cisco ≫ Vpn Client Version 5.0.04.0300
Cisco ≫ Vpn Client Version 5.0.5
Cisco ≫ Vpn Client Version 5.0.05.0290
Cisco ≫ Vpn Client Version 5.0.6
Cisco ≫ Vpn Client Version 5.0.06.0160
Cisco ≫ Vpn Client Version 5.0.7
Cisco ≫ Vpn Client Version 5.0.7.0240
Cisco ≫ Vpn Client Version 5.0.7.0290
Cisco ≫ Vpn Client Version 5.0.07.0290
Cisco ≫ Vpn Client Version 5.0.07.0410
Cisco ≫ Vpn Client Version 5.0.07.0440
Cisco ≫ Vpn Client Version 5.0.7.0440
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.54% 0.409
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.securitytracker.com/id/1033750
Third Party Advisory
VDB Entry
https://www.nettitude.co.uk/vulnerability-discovered-in-unsupported-cisco-systems-vpn-client/
Exploit