Multiple vulnerabilities in Cisco AnyConnect SMC

Description

Multiple serious vulnerabilities have been found in Cisco AnyConnect Secure Mobility Client. Malicious users can exploit these vulnerabilities to gain privileges or write arbitrary files.

Below is a complete list of vulnerabilities

1. An unknown vulnerability can be exploited locally via a specially deigned IPC messages;
2. Improper access control implementation and other unknown vulnerability can be exploited locally via a specially designed messages.

Original advisories

Related products

• Cisco-AnyConnect-Secure-Mobility-Client

CVE list

• CVE-2015-0663
  high
• CVE-2015-0662
  high
• CVE-2015-0665
  high
• CVE-2015-0664
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com