CVE-2011-2041
Severity Score
7.2
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556.
La funcionalidad de comienzo Antes de inicio de sesión (SBL) en Cisco Secure Mobility AnyConnect Client (anteriormente AnyConnect VPN Client) antes de v2.3.254 en Windows, y Windows Mobile, permite a usuarios locales conseguir privilegios a través de una interacción no especificada con la interfaz de usuario. Error también conocido como Bug ID CSCta40556.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-05-10 CVE Reserved
- 2011-06-01 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/72716 | Vdb Entry | |
| http://www.securityfocus.com/bid/48077 | Vdb Entry | |
| http://www.securitytracker.com/id?1025591 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml | 2011-09-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | <= 2.3.2016 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version " <= 2.3.2016" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | <= 2.3.2016 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version " <= 2.3.2016" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Mobile Search vendor "Microsoft" for product "Windows Mobile" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.0 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.0 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.0" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Mobile Search vendor "Microsoft" for product "Windows Mobile" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.1 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.1 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.1" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Mobile Search vendor "Microsoft" for product "Windows Mobile" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.2 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.2" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.2 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.2" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Mobile Search vendor "Microsoft" for product "Windows Mobile" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.2.128 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.2.128" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.2.128 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.2.128" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Mobile Search vendor "Microsoft" for product "Windows Mobile" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.2.133 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.2.133" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.2.133 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.2.133" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Mobile Search vendor "Microsoft" for product "Windows Mobile" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.2.136 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.2.136" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.2.136 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.2.136" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Mobile Search vendor "Microsoft" for product "Windows Mobile" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.2.140 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.2.140" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.2.140 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.2.140" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Mobile Search vendor "Microsoft" for product "Windows Mobile" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.3 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.3" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.3 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.3" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Mobile Search vendor "Microsoft" for product "Windows Mobile" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.3.185 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.3.185" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Search vendor "Microsoft" for product "Windows" | * | - |
Safe
|
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.3.185 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.3.185" | - |
Affected
| in | Microsoft Search vendor "Microsoft" | Windows Mobile Search vendor "Microsoft" for product "Windows Mobile" | * | - |
Safe
|