CVE-2015-0664

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-03-18 · updated 2026-06-17
Weakness: CWE-20

Description

The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195.

Affected products

Cisco AnyConnect Secure Mobility Client: through 4.0\(.00051\)

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=37861
http://www.securitytracker.com/id/1031932
http://tools.cisco.com/security/center/viewAlert.x?alertId=37861
http://www.securitytracker.com/id/1031932

Get alerted when CVE-2015-0664 or the next vulnerability affects your stack