CVE-2015-0665

Severity: medium (CVSS 6.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-03-17 · updated 2026-06-17
Weakness: CWE-22

Description

The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173.

Affected products

Cisco AnyConnect Secure Mobility Client: through 4.0\(.00051\)

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=37862
http://www.securitytracker.com/id/1031931
http://tools.cisco.com/security/center/viewAlert.x?alertId=37862
http://www.securitytracker.com/id/1031931

Get alerted when CVE-2015-0665 or the next vulnerability affects your stack