CVE-2015-4211

HIGH 7.2CVE-2015-4211 · Published 24/06/2015 · updated 17/06/2026

In short

CVE-2015-4211 is a HIGH (CVSS 7.2) vulnerability affecting anyconnect secure mobility client (cisco).
Chance of exploitation in the next 30 days (EPSS): 0.41%, higher than 35.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
anyconnect secure mobility client cisco	`= 3.1(60)`	No fix yet

Description

Cisco AnyConnect Secure Mobility Client 3.1(60) on Windows does not properly validate pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCus65862.

References

tools.cisco.com/security/center/viewAlert.x · Vendor Advisory
securityfocus.com/bid/75373 · Third Party Advisory
securitytracker.com/id/1032704 · Third Party Advisory

More vulnerabilities in anyconnect secure mobility client

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

anyconnect secure mobility client

cisco

= 3.1(60)

No fix yet

More vulnerabilities in anyconnect secure mobility client

See all →