CVE-2015-0663

Severity: medium (CVSS 6.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-03-17 · updated 2026-06-17
Weakness: CWE-264

Description

Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392.

Affected products

Cisco AnyConnect Secure Mobility Client: through 4.0\(.00051\)

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=37863
http://www.securitytracker.com/id/1031930
http://tools.cisco.com/security/center/viewAlert.x?alertId=37863
http://www.securitytracker.com/id/1031930

Get alerted when CVE-2015-0663 or the next vulnerability affects your stack