CVE-2013-1173

Severity: medium (CVSS 6.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-11 · updated 2026-06-16
Weakness: CWE-119

Description

Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143.

Affected products

Cisco AnyConnect Secure Mobility Client: 2.0, 2.1, 2.2, 2.2.128, 2.2.133, 2.2.136 (+51)

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1173
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1173

Get alerted when CVE-2013-1173 or the next vulnerability affects your stack