Description (CNA)
A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to elevate privileges to those of SYSTEM. The client update process is executed after a successful VPN connection is established. This vulnerability exists because improper permissions are assigned to a temporary directory that is created during the update process. An attacker could exploit this vulnerability by abusing a specific function of the Windows installer process. A successful exploit could allow the attacker to execute code with SYSTEM privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco Secure Client | affected 4.9.00086; affected 4.9.01095; affected 4.9.02028; affected 4.9.03047; affected 4.9.03049; affected 4.9.04043; affected 4.9.04053; affected 4.9.05042; affected 4.9.06037; affected 4.10.00093; affected 4.10.01075; affected 4.10.02086; affected 4.10.03104; affected 4.10.04065; affected 4.10.04071; affected 4.10.05085; affected 4.10.05095; affected 4.10.05111; affected 4.10.06079; affected 4.10.06090; affected 5.0.00238; affected 5.0.00529; affected 5.0.00556; affected 5.0.01242 |
CWE
CWE-276
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.