CVEvulnerability

CVE-2016-6369

7.8 HIGH Published 2016-08-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-08-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264

Description

Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464.

Affected configurations

• cisco anyconnect secure mobility client 2.0.0343 • cisco anyconnect secure mobility client 2.1.0148 • cisco anyconnect secure mobility client 2.2.0133 • cisco anyconnect secure mobility client 2.2.0136 • cisco anyconnect secure mobility client 2.2.0140 • cisco anyconnect secure mobility client 2.3.0185 • cisco anyconnect secure mobility client 2.3.0254 • cisco anyconnect secure mobility client 2.3.1003 • cisco anyconnect secure mobility client 2.3.2016 • cisco anyconnect secure mobility client 2.4.0202 • cisco anyconnect secure mobility client 2.4.1012 • cisco anyconnect secure mobility client 2.5.0217 • cisco anyconnect secure mobility client 2.5.2006 • cisco anyconnect secure mobility client 2.5.2010 • cisco anyconnect secure mobility client 2.5.2011 • cisco anyconnect secure mobility client 2.5.2014 • cisco anyconnect secure mobility client 2.5.2017 • cisco anyconnect secure mobility client 2.5.2018 • cisco anyconnect secure mobility client 2.5.2019 • cisco anyconnect secure mobility client 2.5.3041 • cisco anyconnect secure mobility client 2.5.3046 • cisco anyconnect secure mobility client 2.5.3051 • cisco anyconnect secure mobility client 2.5.3054 • cisco anyconnect secure mobility client 2.5.3055 • cisco anyconnect secure mobility client 2.5 base • cisco anyconnect secure mobility client 3.0.0 • cisco anyconnect secure mobility client 3.0.0629 • cisco anyconnect secure mobility client 3.0.1047 • cisco anyconnect secure mobility client 3.0.2052 • cisco anyconnect secure mobility client 3.0.3050 • cisco anyconnect secure mobility client 3.0.3054 • cisco anyconnect secure mobility client 3.0.4235 • cisco anyconnect secure mobility client 3.0.5075 • cisco anyconnect secure mobility client 3.0.5080 • cisco anyconnect secure mobility client 3.0.09231 • cisco anyconnect secure mobility client 3.0.09266 • cisco anyconnect secure mobility client 3.0.09353 • cisco anyconnect secure mobility client 3.1\(60\) • cisco anyconnect secure mobility client 3.1.0 • cisco anyconnect secure mobility client 3.1.02043 • cisco anyconnect secure mobility client 3.1.05182 • cisco anyconnect secure mobility client 3.1.05187 • cisco anyconnect secure mobility client 3.1.06073 • cisco anyconnect secure mobility client 3.1.07021 • cisco anyconnect secure mobility client 4.0\(48\) • cisco anyconnect secure mobility client 4.0\(64\) • cisco anyconnect secure mobility client 4.0\(2049\) • cisco anyconnect secure mobility client 4.0.0 • cisco anyconnect secure mobility client 4.0.00048 • cisco anyconnect secure mobility client 4.0.00051 • cisco anyconnect secure mobility client 4.1\(8\) • cisco anyconnect secure mobility client 4.1.0 • cisco anyconnect secure mobility client 4.2.0 • cisco anyconnect secure mobility client 4.2.04039 • cisco anyconnect secure mobility client 4.3.0 • cisco anyconnect secure mobility client 4.3.00748 • cisco anyconnect secure mobility client 4.3.01095

Related

Weakness · not in database (1)

References