CVE-2015-6322
Severity Score
6.6
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.
El canal IPC en Cisco AnyConnect Secure Mobility Client 2.0.0343 hasta la versión 4.1(8) permite a usuarios locales eludir restricciones destinadas al acceso y mover archivos arbitrarios aprovechando la falta de validación en la ruta de origen, también conocido como Bug ID CSCuv48563.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-08-17 CVE Reserved
- 2015-10-12 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id/1033785 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151008-asmc | 2016-12-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.0.0343 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.0.0343" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.1.0148 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.1.0148" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.2.0133 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.2.0133" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.2.0136 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.2.0136" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.2.0140 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.2.0140" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.3.0185 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.3.0185" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.3.0254 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.3.0254" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.3.1003 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.3.1003" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.3.2016 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.3.2016" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.4.0202 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.4.0202" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.4.1012 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.4.1012" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5.0217 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5.0217" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5.2006 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5.2006" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5.2010 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5.2010" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5.2011 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5.2011" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5.2014 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5.2014" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5.2017 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5.2017" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5.2018 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5.2018" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5.2019 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5.2019" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5.3041 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5.3041" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5.3046 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5.3046" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5.3051 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5.3051" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5.3054 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5.3054" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5.3055 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5.3055" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 2.5_base Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "2.5_base" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.0.0 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.0.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.0.0629 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.0.0629" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.0.1047 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.0.1047" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.0.2052 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.0.2052" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.0.3050 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.0.3050" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.0.3054 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.0.3054" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.0.4235 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.0.4235" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.0.5075 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.0.5075" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.0.5080 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.0.5080" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.0.09231 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.0.09231" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.0.09266 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.0.09266" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.0.09353 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.0.09353" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.1\(60\) Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.1\(60\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.1.0 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.1.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.1.02043 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.1.02043" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.1.05182 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.1.05182" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.1.05187 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.1.05187" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.1.06073 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.1.06073" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 3.1.07021 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "3.1.07021" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 4.0\(48\) Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "4.0\(48\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 4.0\(64\) Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "4.0\(64\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 4.0\(2049\) Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "4.0\(2049\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 4.0.0 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "4.0.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 4.0.00048 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "4.0.00048" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 4.0.00051 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "4.0.00051" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 4.1\(8\) Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "4.1\(8\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Anyconnect Secure Mobility Client Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" | 4.1.0 Search vendor "Cisco" for product "Anyconnect Secure Mobility Client" and version "4.1.0" | - |
Affected
| ||||||