FKIE_CVE-2016-9192

Vulnerability from fkie_nvd - Published: 2016-12-14 00:59 - Updated: 2026-05-06 22:30
Severity
7.8 (High) - CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected Releases: 4.3(2039) 4.3(748). Known Fixed Releases: 4.3(4019) 4.4(225).
References
psirt@cisco.comhttp://www.securityfocus.com/bid/94770Third Party Advisory, VDB Entry
psirt@cisco.comhttp://www.securitytracker.com/id/1037409Third Party Advisory, VDB Entry
psirt@cisco.comhttps://github.com/nettitude/PoshC2/blob/master/Modules/CVE-2016-9192.ps1
psirt@cisco.comhttps://github.com/serializingme/cve-2016-9192
psirt@cisco.comhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-anyconnect1Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/94770Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id/1037409Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108https://github.com/nettitude/PoshC2/blob/master/Modules/CVE-2016-9192.ps1
af854a3a-2127-422b-91ae-364da2661108https://github.com/serializingme/cve-2016-9192
af854a3a-2127-422b-91ae-364da2661108https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-anyconnect1Vendor Advisory
Impacted products
Vendor Product Version
cisco anyconnect_secure_mobility_client 3.1\(60\)
cisco anyconnect_secure_mobility_client 3.1.0
cisco anyconnect_secure_mobility_client 3.1.02043
cisco anyconnect_secure_mobility_client 3.1.05182
cisco anyconnect_secure_mobility_client 3.1.05187
cisco anyconnect_secure_mobility_client 3.1.06073
cisco anyconnect_secure_mobility_client 3.1.07021
cisco anyconnect_secure_mobility_client 4.0\(48\)
cisco anyconnect_secure_mobility_client 4.0\(64\)
cisco anyconnect_secure_mobility_client 4.0\(2049\)
cisco anyconnect_secure_mobility_client 4.0.0
cisco anyconnect_secure_mobility_client 4.0.00048
cisco anyconnect_secure_mobility_client 4.0.00051
cisco anyconnect_secure_mobility_client 4.1\(8\)
cisco anyconnect_secure_mobility_client 4.1.0
cisco anyconnect_secure_mobility_client 4.2.0
cisco anyconnect_secure_mobility_client 4.2.04039
cisco anyconnect_secure_mobility_client 4.3.0
cisco anyconnect_secure_mobility_client 4.3.00748
cisco anyconnect_secure_mobility_client 4.3.01095
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1\\(60\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "6B415C06-7A2B-4CDC-B7DD-12FF22DB466F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7CFE1E12-CAEE-4CB5-8969-D6F92451F69B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.02043:*:*:*:*:*:*:*",
              "matchCriteriaId": "871452CA-054B-411F-AC5F-78C7F666D813",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.05182:*:*:*:*:*:*:*",
              "matchCriteriaId": "E12D9394-B33E-4292-9FF1-E405AF1781B0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.05187:*:*:*:*:*:*:*",
              "matchCriteriaId": "54D06E2E-6CBC-40D4-9409-030822552A45",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.06073:*:*:*:*:*:*:*",
              "matchCriteriaId": "EB28D6B8-C1AC-49E6-9753-7E4703CB73A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.07021:*:*:*:*:*:*:*",
              "matchCriteriaId": "217290C9-A508-4253-B807-E5E605A2D990",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\\(48\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "0BFC839F-D9E1-4B41-B316-8FF44FDAFC78",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\\(64\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "9EC1592B-04DE-4FBB-88EF-7AFADEE75624",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\\(2049\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "28E79966-4EE3-4987-AB0C-FEC2DD713012",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3782E3EC-B35A-443E-B9CF-5EA8B2D0F732",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.00048:*:*:*:*:*:*:*",
              "matchCriteriaId": "0608CACF-28C5-4A23-81FE-7FEB655FC84B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.00051:*:*:*:*:*:*:*",
              "matchCriteriaId": "72B9DB6D-0ABC-4938-A36E-2F68AB94635C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.1\\(8\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "B8B34FCE-31B0-47F1-80D9-4AF8E8584EF1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "ACBB4489-1C7C-4435-AF21-ADBA57F49C19",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6A4023A-A8D3-47A7-98A4-4B8F47E1085C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.2.04039:*:*:*:*:*:*:*",
              "matchCriteriaId": "DDD9910A-4609-41B3-97E2-FF1366559C1E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "11C45A3D-8EF2-428B-A154-740EF5704058",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.3.00748:*:*:*:*:*:*:*",
              "matchCriteriaId": "3D5C7873-878D-48C4-9461-9B112701DAF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.3.01095:*:*:*:*:*:*:*",
              "matchCriteriaId": "55AE035D-DA9A-4894-A838-DA9266E3859F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected Releases: 4.3(2039) 4.3(748). Known Fixed Releases: 4.3(4019) 4.4(225)."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en Cisco AnyConnect Secure Mobility Client para Windows podr\u00eda permitir a un atacante local autenticado instalar y ejecutar un archivo ejecutable con privilegios equivalentes a la cuenta SYSTEM del sistema operativo Microsoft Windows. M\u00e1s Informaci\u00f3n: CSCvb68043. Lanzamientos Afectados Conocidos: 4.3(2039) 4.3(748). Lanzamientos Reparados Conocidos: 4.3(4019) 4.4(225)."
    }
  ],
  "id": "CVE-2016-9192",
  "lastModified": "2026-05-06T22:30:45.220",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2016-12-14T00:59:15.223",
  "references": [
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/94770"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1037409"
    },
    {
      "source": "psirt@cisco.com",
      "url": "https://github.com/nettitude/PoshC2/blob/master/Modules/CVE-2016-9192.ps1"
    },
    {
      "source": "psirt@cisco.com",
      "url": "https://github.com/serializingme/cve-2016-9192"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-anyconnect1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/94770"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1037409"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://github.com/nettitude/PoshC2/blob/master/Modules/CVE-2016-9192.ps1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://github.com/serializingme/cve-2016-9192"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-anyconnect1"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.