CVE-2011-2041
published 2011-06-02CVE-2011-2041: The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on…
PriorityP427high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.31%
22.6th percentile
The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | anyconnect_secure_mobility | — | — |
| cisco | anyconnect_secure_mobility_client | <= 2.3.2016 | — |
| cisco | anyconnect_secure_mobility_client | — | — |
| cisco | anyconnect_secure_mobility_client | — | — |
| cisco | anyconnect_secure_mobility_client | — | — |
| cisco | anyconnect_secure_mobility_client | — | — |
| cisco | anyconnect_secure_mobility_client | — | — |
| cisco | anyconnect_secure_mobility_client | — | — |
| cisco | anyconnect_secure_mobility_client | — | — |
| cisco | anyconnect_secure_mobility_client | — | — |
| cisco | anyconnect_secure_mobility_client | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-2prm-pv23-652f: The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2
ghsa_unreviewed·2022-05-17
CVE-2011-2041 [HIGH] GHSA-2prm-pv23-652f: The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2
The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556.
Cisco
Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
vendor_cisco
CVE-2011-2041 Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
CVE-2011-2041: Multiple Vulnerabilities in Cisco AnyConnect Secure Mobility Client
The Cisco AnyConnect Secure Mobility Client, previously known as the Cisco AnyConnect VPN Client, is affected by the following vulnerabilities: Arbitrary Program Execution Vulnerability Local Privilege Escalation Vulnerability Cisco has released software updates that address these vulnerabilities. There are no
Bug IDs: CSCsy00904, CSCsy05934, CSCsy00904, CSCsy05934, CSCta40556
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://osvdb.org/72716http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtmlhttp://www.securityfocus.com/bid/48077http://www.securitytracker.com/id?1025591http://osvdb.org/72716http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtmlhttp://www.securityfocus.com/bid/48077http://www.securitytracker.com/id?1025591
2011-06-02
Published