← All CVEs

CVE-2011-2039

high · 7.6

The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a certain ActiveX control in vpnweb.ocx, aka Bug ID CSCsy00904.

7.6
CVSS
70.0%
EPSS (exploit prob.)
99th
EPSS percentile
2011-06-02
Published

AV:N/AC:H/Au:N/C:C/I:C/A:C

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
ciscoanyconnect_secure_mobility_client<= 2.3
ciscoanyconnect_secure_mobility_client2.0
ciscoanyconnect_secure_mobility_client2.1
ciscoanyconnect_secure_mobility_client2.2
ciscoanyconnect_secure_mobility_client2.2.128
ciscoanyconnect_secure_mobility_client2.2.133
ciscoanyconnect_secure_mobility_client2.2.136
ciscoanyconnect_secure_mobility_client2.2.140
microsoftwindowsall versions
microsoftwindows_mobileall versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-2039