PT-2011-3561 · Cisco · Cisco Anyconnect Secure Mobility Client

Elazar Broad · Published 2011-06-02 · Updated 2017-08-29 · CVE-2011-2040

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client versions prior to 2.5.3041 Cisco AnyConnect Secure Mobility Client versions 3.0.x prior to 3.0.629

Description The issue allows remote attackers to execute arbitrary code via the url property to a Java applet. This is due to the helper application in Cisco AnyConnect Secure Mobility Client downloading a client executable file (vpndownloader.exe) without verifying its authenticity.

Recommendations For versions prior to 2.5.3041, update to version 2.5.3041 or later. For versions 3.0.x prior to 3.0.629, update to version 3.0.629 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2011-2040

Affected Products

Cisco Anyconnect Secure Mobility Client

References · 6

• http://cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2040 · Security Note
• http://kb.cert.org/vuls/id/490097 · Note
• http://securitytracker.com/id?1025591 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/67739 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=910 · Note