CVE-2011-2039 The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.e...
HighCVSS 7.6
EPSS 70.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a certain ActiveX control in vpnweb.ocx, aka Bug ID CSCsy00904.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco anyconnect secure mobility client | <= 2.3 | No fix listed |
| cisco anyconnect secure mobility client | = 2.0 | No fix listed |
| cisco anyconnect secure mobility client | = 2.1 | No fix listed |
| cisco anyconnect secure mobility client | = 2.2 | No fix listed |
| cisco anyconnect secure mobility client | = 2.2.128 | No fix listed |
| cisco anyconnect secure mobility client | = 2.2.133 | No fix listed |
| cisco anyconnect secure mobility client | = 2.2.136 | No fix listed |
| cisco anyconnect secure mobility client | = 2.2.140 | No fix listed |
References
- 20110601 Cisco AnyConnect VPN Client Arbitrary Program Execution Vulnerability third-party-advisory
- 72714 vdb-entry
- 8272 third-party-advisory
- 20110601 Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client vendor-advisory
- VU#490097 third-party-advisory us-government-resource
- 1025591 vdb-entry
- cisco-asmc-helper-code-execution(67739) vdb-entry