Detections
Analytics
Cisco AnyConnect Secure Mobility Client VPN Downloader RCE (cisco-sa-20120620-ac)
high Nessus Plugin ID 59820
Language:
Synopsis
The remote host has software installed that is affected by an arbitrary code execution vulnerability.Description
The remote host has a version of Cisco AnyConnect < 2.5 MR6.Such versions are potentially affected by an arbitrary code execution vulnerability. The WebLaunch VPN downloader implementation does not properly validate binaries that are received, which can allow remote attackers to execute arbitrary code via ActiveX or Java components.
Solution
Upgrade to Cisco AnyConnect Secure Mobility Client 2.5 MR6 or greater.See Also
http://seclists.org/fulldisclosure/2012/Aug/278
Plugin Details
Severity: High
ID: 59820
File Name: cisco_anyconnect_vpn_downloader_code_execution.nasl
Version: 1.11
Type: Local
Agent: windows
Family: Windows
Published: 7/2/2012
Updated: 7/6/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.15
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:cisco:anyconnect_secure_mobility_client
Required KB Items: SMB/cisco_anyconnect/Installed
Exploit Ease: No known exploits are available
Patch Publication Date: 6/20/2012
Vulnerability Publication Date: 6/20/2012
Reference Information
CVE: CVE-2012-2493
BID: 54107