CVEvulnerability
CVE-2011-2041
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-06-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556.
Affected configurations
• cisco anyconnect secure mobility client (<= 2.3.2016)
• cisco anyconnect secure mobility client 2.0
• cisco anyconnect secure mobility client 2.1
• cisco anyconnect secure mobility client 2.2
• cisco anyconnect secure mobility client 2.2.128
• cisco anyconnect secure mobility client 2.2.133
• cisco anyconnect secure mobility client 2.2.136
• cisco anyconnect secure mobility client 2.2.140
• cisco anyconnect secure mobility client 2.3
• cisco anyconnect secure mobility client 2.3.185
Related
Weakness · not in database (1)
References
- http://osvdb.org/72716 osvdb.org
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml Vendor Advisory
- http://www.securityfocus.com/bid/48077 www.securityfocus.com
- http://www.securitytracker.com/id?1025591 www.securitytracker.com
- http://osvdb.org/72716 osvdb.org
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml Vendor Advisory
- http://www.securityfocus.com/bid/48077 www.securityfocus.com
- http://www.securitytracker.com/id?1025591 www.securitytracker.com