VAR-201510-0032

Vulnerability from variot - Updated: 2025-04-13 23:22

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563. A local attacker may exploit this issue to gain elevated system privileges on the device. This issue is being tracked by Cisco Bug ID CSCuv48563. The vulnerability is caused by the fact that the program does not verify the source path in the IPC command

Show details on source website

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201510-0032",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "cisco",
        "version": "2.3.2016"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "cisco",
        "version": "2.4.1012"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "cisco",
        "version": "2.5.2011"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "cisco",
        "version": "2.5.2010"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "cisco",
        "version": "2.5.2006"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "2.5_base"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "2.2.0136"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "2.4.0202"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "3.1.02043"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "cisco",
        "version": "2.5.0217"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "2.5.2019"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "2.5.3054"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "3.0.3054"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "3.0.5075"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "3.0.1047"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "3.0.4235"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "2.5.3046"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "2.5.3051"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "3.0.3050"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "2.5.3041"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "2.5.2017"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "2.3.1003"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "3.0.2052"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "2.5.2014"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "2.5.3055"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "3.0.5080"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "cisco",
        "version": "2.5.2018"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.1.0148"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0.09231"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.0\\(64\\)"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0.0"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1.0"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.0\\(48\\)"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.1\\(8\\)"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.0.0"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0.09266"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.0\\(2049\\)"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.0.00051"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1.07021"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0.09353"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.0.0343"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1.06073"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.1.0"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1\\(60\\)"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.3.0254"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.2.0133"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "4.0.00048"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.0.0629"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.2.0140"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1.05182"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "3.1.05187"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "cisco",
        "version": "2.3.0185"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "cisco",
        "version": "2.0.0343 to  4.1(8)"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.1"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.5.5130"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.1.7021"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.5.1025"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "4.0(64)"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.5.217"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.1.2043"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.0.629"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.0"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.2.140"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.3.185"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.1.5182"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.5"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.4.5004"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.2.133"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.1(60)"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "4.0(48)"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.5.5112"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.5.5116"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.5.5125"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.5.2001"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.0.7059"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.1(.02043)"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.0.343"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.0.9266"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.4"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.0.8057"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.4.4004"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.4.4014"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.1.6073"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "4.0"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.2"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.0.8066"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.3"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "4.0(2049)"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.0.9231"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "4.0.48"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.5.5118"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.1.495"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.5.6005"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.3.254"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.0.9353"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.2.128"
      },
      {
        "model": "anyconnect secure mobility client mr8",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.0"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.4.7073"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "4.1"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "4.1(8)"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.2"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.2.136"
      },
      {
        "model": "anyconnect secure mobility client mr6",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.5"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.1"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.5.5131"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.0"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.4.202"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "4.0.51"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.1.148"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "3.1.5187"
      },
      {
        "model": "anyconnect secure mobility client",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "cisco",
        "version": "2.4.7030"
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "77055"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-005191"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-148"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6322"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:cisco:anyconnect_secure_mobility_client",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-005191"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Cisco",
    "sources": [
      {
        "db": "BID",
        "id": "77055"
      }
    ],
    "trust": 0.3
  },
  "cve": "CVE-2015-6322",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.6,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "id": "CVE-2015-6322",
            "impactScore": 9.2,
            "integrityImpact": "COMPLETE",
            "severity": "MEDIUM",
            "trust": 1.8,
            "vectorString": "AV:L/AC:L/Au:N/C:N/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 6.6,
            "confidentialityImpact": "NONE",
            "exploitabilityScore": 3.9,
            "id": "VHN-84283",
            "impactScore": 9.2,
            "integrityImpact": "COMPLETE",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:L/AC:L/AU:N/C:N/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2015-6322",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "NVD",
            "id": "CVE-2015-6322",
            "trust": 0.8,
            "value": "Medium"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201510-148",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULHUB",
            "id": "VHN-84283",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-84283"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-005191"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-148"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6322"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563. \nA local attacker may exploit this issue to gain elevated system privileges on the device. \nThis issue is being tracked by Cisco Bug ID CSCuv48563. The vulnerability is caused by the fact that the program does not verify the source path in the IPC command",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2015-6322"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-005191"
      },
      {
        "db": "BID",
        "id": "77055"
      },
      {
        "db": "VULHUB",
        "id": "VHN-84283"
      }
    ],
    "trust": 1.98
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2015-6322",
        "trust": 2.8
      },
      {
        "db": "SECTRACK",
        "id": "1033785",
        "trust": 1.1
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-005191",
        "trust": 0.8
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-148",
        "trust": 0.7
      },
      {
        "db": "BID",
        "id": "77055",
        "trust": 0.4
      },
      {
        "db": "VULHUB",
        "id": "VHN-84283",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-84283"
      },
      {
        "db": "BID",
        "id": "77055"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-005191"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-148"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6322"
      }
    ]
  },
  "id": "VAR-201510-0032",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-84283"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2025-04-13T23:22:23.773000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "cisco-sa-20151008-asmc",
        "trust": 0.8,
        "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151008-asmc"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-005191"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-264",
        "trust": 1.9
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-84283"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-005191"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6322"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.7,
        "url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20151008-asmc"
      },
      {
        "trust": 1.1,
        "url": "http://www.securitytracker.com/id/1033785"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2015-6322"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2015-6322"
      },
      {
        "trust": 0.3,
        "url": "http://www.cisco.com/"
      },
      {
        "trust": 0.3,
        "url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20151008-asmc "
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-84283"
      },
      {
        "db": "BID",
        "id": "77055"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-005191"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-148"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6322"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-84283"
      },
      {
        "db": "BID",
        "id": "77055"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-005191"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-148"
      },
      {
        "db": "NVD",
        "id": "CVE-2015-6322"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2015-10-12T00:00:00",
        "db": "VULHUB",
        "id": "VHN-84283"
      },
      {
        "date": "2015-10-08T00:00:00",
        "db": "BID",
        "id": "77055"
      },
      {
        "date": "2015-10-14T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-005191"
      },
      {
        "date": "2015-10-13T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201510-148"
      },
      {
        "date": "2015-10-12T10:59:10.320000",
        "db": "NVD",
        "id": "CVE-2015-6322"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2016-12-12T00:00:00",
        "db": "VULHUB",
        "id": "VHN-84283"
      },
      {
        "date": "2015-10-08T00:00:00",
        "db": "BID",
        "id": "77055"
      },
      {
        "date": "2015-10-14T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2015-005191"
      },
      {
        "date": "2015-10-16T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201510-148"
      },
      {
        "date": "2025-04-12T10:46:40.837000",
        "db": "NVD",
        "id": "CVE-2015-6322"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "local",
    "sources": [
      {
        "db": "BID",
        "id": "77055"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-148"
      }
    ],
    "trust": 0.9
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Cisco AnyConnect Secure Mobility Client of  IPC Vulnerability that bypasses access restrictions on channels",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2015-005191"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "permissions and access control",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201510-148"
      }
    ],
    "trust": 0.6
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…