CVE-2015-4211: High severity cisco anyconnect secure vulnerability
Published Jun 24, 2015
·Updated
Cisco AnyConnect Secure Mobility Client 3.1(60) on Windows does not properly validate pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCus65862.
Affected Software
2 affected components
Cisco AnyConnect Secure Mobility Client=3.1\(60\)
Microsoft Windows
Event History
Jun 24, 2015
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4211?
CVE-2015-4211 is classified as a high-severity vulnerability because it allows local users to gain elevated privileges.
2
How do I fix CVE-2015-4211?
To fix CVE-2015-4211, upgrade to the latest version of Cisco AnyConnect Secure Mobility Client that addresses the path validation issue.
3
Who is affected by CVE-2015-4211?
CVE-2015-4211 affects users of Cisco AnyConnect Secure Mobility Client version 3.1(60) on Windows systems.
4
What type of vulnerability is CVE-2015-4211?
CVE-2015-4211 is a privilege escalation vulnerability due to improper validation of pathnames.
5
Can CVE-2015-4211 be exploited remotely?
CVE-2015-4211 cannot be exploited remotely as it requires local access to the affected system.