GCVE - cpe:2.3:a:cisco:vpn_client:5.0.7.0290:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:vpn_client:5.0.7.0290:*:*:*:*:*:*:*

part: a version: 5.0.7.0290 update: *

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-7600`	vulnerable	2026-06-08 05:07:01.513105	Details available Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section. Published: 2015-10-06T17:00:00.000Z Updated: 2024-08-06T07:51:28.595Z Open on db.gcve.eu Reference links https://www.nettitude.co.uk/vulnerability-discovered-in-unsupported-cisco-systems-vpn-client/ http://www.securitytracker.com/id/1033750	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2678`	vulnerable	2026-06-08 04:58:08.377176	Details available The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\INTERACTIVE:F) for cvpnd.exe, which allows local users to gain privileges by replacing this executable file with an arbitrary program, aka Bug ID CSCtn50645. NOTE: this vulnerability exists because of a CVE-2007-4415 regression. Published: 2011-07-07T19:00:00.000Z Updated: 2024-08-06T23:08:23.711Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/518638/100/0/threaded http://isc.sans.edu/diary.html?storyid=11125 http://www.cisco.com/warp/public/707/cisco-sa-20070815-vpnclient.shtml http://securityreason.com/securityalert/8297 https://exchange.xforce.ibmcloud.com/vulnerabilities/68485	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.