CVE-2011-2041

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-06-02 · updated 2026-06-16
Weakness: CWE-264

Description

The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556.

Affected products

Cisco AnyConnect Secure Mobility Client: through 2.3.2016; 2.0, 2.1, 2.2, 2.2.128, 2.2.133, 2.2.136 (+3)

References

http://osvdb.org/72716
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml
http://www.securityfocus.com/bid/48077
http://www.securitytracker.com/id?1025591
http://osvdb.org/72716
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml
http://www.securityfocus.com/bid/48077
http://www.securitytracker.com/id?1025591

Get alerted when CVE-2011-2041 or the next vulnerability affects your stack