CVE-2013-1172

Severity: medium (CVSS 6.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-11 · updated 2026-06-16
Weakness: CWE-20

Description

The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153.

Affected products

Cisco AnyConnect Secure Mobility Client: 2.0, 2.1, 2.2, 2.2.128, 2.2.133, 2.2.136 (+51)

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1172
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1172

Get alerted when CVE-2013-1172 or the next vulnerability affects your stack