CVE-2015-0761

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-06-04 · updated 2026-06-17
Weakness: CWE-264

Description

Cisco AnyConnect Secure Mobility Client before 3.1(8009) and 4.x before 4.0(2052) on Linux does not properly implement unspecified internal functions, which allows local users to obtain root privileges via crafted vpnagent options, aka Bug ID CSCus86790.

Affected products

Cisco AnyConnect Secure Mobility Client: through 3.1\(.07021\); 4.0(.00048), 4.0(.00051)

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=39158
http://www.securityfocus.com/bid/74954
http://www.securitytracker.com/id/1032472
http://tools.cisco.com/security/center/viewAlert.x?alertId=39158
http://www.securityfocus.com/bid/74954
http://www.securitytracker.com/id/1032472

Get alerted when CVE-2015-0761 or the next vulnerability affects your stack