Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2001:*:*:*:*:*:*:*

part: a version: 2.5.2001 update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductAnyconnect Secure Mobility Client (be2ee1de-f2a8-569b-8265-8110ef804802)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5559 vulnerable 2026-06-08 05:04:52.143695 Details available
Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.
Published: 2013-11-04T15:00:00.000Z
Updated: 2024-08-06T17:15:21.224Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1173 vulnerable 2026-06-08 05:03:52.986576 Details available
Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143.
Published: 2013-04-11T10:00:00.000Z
Updated: 2024-09-16T19:45:51.955Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-1172 vulnerable 2026-06-08 05:03:52.964949 Details available
The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153.
Published: 2013-04-11T10:00:00.000Z
Updated: 2024-09-17T02:51:40.629Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-2040 vulnerable 2026-06-08 04:58:03.573243 Details available
The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a Java applet, aka Bug ID CSCsy05934.
Published: 2011-06-02T19:00:00.000Z
Updated: 2024-08-06T22:46:01.031Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.