cbcvebase.
CVE-2009-4118
published 2009-12-01

CVE-2009-4118: The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an…

PriorityP413low2.1CVSS 2.0
AVLACLAuNCNINAP
EXPLOIT
EPSS
2.50%
82.7th percentile
The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running.

Affected

21 ranges
VendorProductVersion rangeFixed in
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
ciscovpn_client——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.