CVE-2011-2040 — Improper Input Validation in Cisco Anyconnect Secure Mobility Client

CWE-20 — Improper Input Validation4 documents4 sources
Severity
9.3CRITICALNVD
EPSS
2.1%
top 15.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Anyconnect Secure Mobility Client
Timeline
PublishedJun 2
Latest updateMay 17

Description

The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a Java applet, aka Bug ID CSCsy05934.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-qh85-rfph-r6p5: The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2↗2022-05-17
▶
CVEList
CVE-2011-2040: The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2↗2011-06-02
▶

🔍Detection Rules

1
Suricata
ET ACTIVEX Cisco AnyConnect VPN Secure Mobility Client Cisco.AnyConnect.VPNWeb.1 Arbitrary Program Execution Attempt↗2011-06-03
▶
CVE-2011-2040 — Improper Input Validation in Cisco | cvebase