PT-2011-3561 · Cisco · Cisco Anyconnect Secure Mobility Client

Elazar Broad · Publicado 2011-06-02 · Atualizado 2017-08-29 · CVE-2011-2040

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions prior to 2.5.3041 Cisco AnyConnect Secure Mobility Client versions 3.0.x prior to 3.0.629

Description The issue allows remote attackers to execute arbitrary code via the url property to a Java applet. This is due to the helper application in Cisco AnyConnect Secure Mobility Client downloading a client executable file (vpndownloader.exe) without verifying its authenticity.

Recommendations For versions prior to 2.5.3041, update to version 2.5.3041 or later. For versions 3.0.x prior to 3.0.629, update to version 3.0.629 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-2040

Produtos afetados

Cisco Anyconnect Secure Mobility Client

Referências · 6

• http://kb.cert.org/vuls/id/490097 · Nota
• http://securitytracker.com/id?1025591 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-2040 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67739 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=910 · Nota