Lucene search

K
cveCiscoCVE-2015-0665
HistoryMar 17, 2015 - 2:01 a.m.

CVE-2015-0665

2015-03-1702:01:49
CWE-22
cisco
web.nvd.nist.gov
37
cisco
anyconnect
secure mobility client
hostscan
cve-2015-0665
nvd
bug id cscus79173

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

9.9%

The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173.

Affected configurations

Nvd
Node
ciscoanyconnect_secure_mobility_clientRange4.0\(.00051\)
VendorProductVersionCPE
ciscoanyconnect_secure_mobility_client*cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:*:*:*

CVSS2

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:C/A:C

AI Score

6.5

Confidence

Low

EPSS

0

Percentile

9.9%