CVEvulnerability
CVE-2015-7600
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-10-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section.
Affected configurations
• cisco vpn client 5.0
• cisco vpn client 5.0.01
• cisco vpn client 5.0.01.0600
• cisco vpn client 5.0.2
• cisco vpn client 5.0.02.0090
• cisco vpn client 5.0.2.0090
• cisco vpn client 5.0.03.0530
• cisco vpn client 5.0.03.0560
• cisco vpn client 5.0.04.0300
• cisco vpn client 5.0.5
• cisco vpn client 5.0.05.0290
• cisco vpn client 5.0.6
• cisco vpn client 5.0.06.0160
• cisco vpn client 5.0.7
• cisco vpn client 5.0.7.0240
• cisco vpn client 5.0.7.0290
• cisco vpn client 5.0.07.0290
• cisco vpn client 5.0.07.0410
• cisco vpn client 5.0.07.0440
• cisco vpn client 5.0.7.0440
Related
Weakness · not in database (1)
References
- http://www.securitytracker.com/id/1033750 Third Party Advisory, VDB Entry
- https://www.nettitude.co.uk/vulnerability-discovered-in-unsupported-cisco-systems-vpn-client/ Exploit
- http://www.securitytracker.com/id/1033750 Third Party Advisory, VDB Entry
- https://www.nettitude.co.uk/vulnerability-discovered-in-unsupported-cisco-systems-vpn-client/ Exploit