CVE-2015-6305: High severity cisco anyconnect secure vulnerability

Published Sep 25, 2015

Updated

Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConnect Secure Mobility Client 2.0 through 4.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by dbghelp.dll, aka Bug ID CSCuv01279. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4211.

Affected Software

52 affected components

Cisco AnyConnect Secure Mobility Client=2.0.0343

Cisco AnyConnect Secure Mobility Client=2.1.0.148

Cisco AnyConnect Secure Mobility Client=2.2.0133

Cisco AnyConnect Secure Mobility Client=2.2.0136

Cisco AnyConnect Secure Mobility Client=2.2.0140

Cisco AnyConnect Secure Mobility Client=2.3.0185

Cisco AnyConnect Secure Mobility Client=2.3.0254

Cisco AnyConnect Secure Mobility Client=2.3.1003

Cisco AnyConnect Secure Mobility Client=2.3.2016

Cisco AnyConnect Secure Mobility Client=2.4.0202

Cisco AnyConnect Secure Mobility Client=2.4.1012

Cisco AnyConnect Secure Mobility Client=2.5.0217

Cisco AnyConnect Secure Mobility Client=2.5.2006

Cisco AnyConnect Secure Mobility Client=2.5.2010

Cisco AnyConnect Secure Mobility Client=2.5.2011

Cisco AnyConnect Secure Mobility Client=2.5.2014

Cisco AnyConnect Secure Mobility Client=2.5.2017

Cisco AnyConnect Secure Mobility Client=2.5.2018

Cisco AnyConnect Secure Mobility Client=2.5.2019

Cisco AnyConnect Secure Mobility Client=2.5.3041

Cisco AnyConnect Secure Mobility Client=2.5.3046

Cisco AnyConnect Secure Mobility Client=2.5.3051

Cisco AnyConnect Secure Mobility Client=2.5.3054

Cisco AnyConnect Secure Mobility Client=2.5.3055

Cisco AnyConnect Secure Mobility Client=2.5_base

Cisco AnyConnect Secure Mobility Client=3.0.0

Cisco AnyConnect Secure Mobility Client=3.0.0629

Cisco AnyConnect Secure Mobility Client=3.0.1047

Cisco AnyConnect Secure Mobility Client=3.0.2052

Cisco AnyConnect Secure Mobility Client=3.0.3050

Cisco AnyConnect Secure Mobility Client=3.0.3054

Cisco AnyConnect Secure Mobility Client=3.0.4235

Cisco AnyConnect Secure Mobility Client=3.0.5075

Cisco AnyConnect Secure Mobility Client=3.0.5080

Cisco AnyConnect Secure Mobility Client=3.0.09231

Cisco AnyConnect Secure Mobility Client=3.0.09266

Cisco AnyConnect Secure Mobility Client=3.0.09353

Cisco AnyConnect Secure Mobility Client=3.1\(60\)

Cisco AnyConnect Secure Mobility Client=3.1.0

Cisco AnyConnect Secure Mobility Client=3.1.02043

Cisco AnyConnect Secure Mobility Client=3.1.05182

Cisco AnyConnect Secure Mobility Client=3.1.05187

Cisco AnyConnect Secure Mobility Client=3.1.06073

Cisco AnyConnect Secure Mobility Client=3.1.07021

Cisco AnyConnect Secure Mobility Client=4.0\(48\)

Cisco AnyConnect Secure Mobility Client=4.0\(64\)

Cisco AnyConnect Secure Mobility Client=4.0\(2049\)

Cisco AnyConnect Secure Mobility Client=4.0.0

Cisco AnyConnect Secure Mobility Client=4.0.00048

Cisco AnyConnect Secure Mobility Client=4.0.00051

Cisco AnyConnect Secure Mobility Client=4.1.0

Microsoft Windows

Event History

Sep 25, 2015

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2015-6305?

CVE-2015-6305 is considered a medium severity vulnerability that allows local users to gain elevated privileges.

How do I fix CVE-2015-6305?

To fix CVE-2015-6305, ensure that you update Cisco AnyConnect Secure Mobility Client to the latest version provided by Cisco.

Which versions of Cisco AnyConnect are affected by CVE-2015-6305?

CVE-2015-6305 affects Cisco AnyConnect Secure Mobility Client versions ranging from 2.0 through 4.1.

Can CVE-2015-6305 be exploited remotely?

No, CVE-2015-6305 requires local access to the vulnerable system to exploit the untrusted search path vulnerability.

What is the impact of CVE-2015-6305 on affected systems?

The impact of CVE-2015-6305 allows local users to execute a Trojan horse DLL in the current working directory, leading to potential privilege escalation.