CVE-2011-2040

high · 9.3

The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a Java applet, aka Bug ID CSCsy05934.

9.3

CVSS

10.7%

EPSS (exploit prob.)

96th

EPSS percentile

2011-06-02

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-20

Affected products

Vendor	Product	Affected versions
cisco	anyconnect_secure_mobility_client	<= 2.5.2019
cisco	anyconnect_secure_mobility_client	2.0
cisco	anyconnect_secure_mobility_client	2.1
cisco	anyconnect_secure_mobility_client	2.2
cisco	anyconnect_secure_mobility_client	2.2.128
cisco	anyconnect_secure_mobility_client	2.2.133
cisco	anyconnect_secure_mobility_client	2.2.136
cisco	anyconnect_secure_mobility_client	2.2.140
cisco	anyconnect_secure_mobility_client	2.3
cisco	anyconnect_secure_mobility_client	2.3.185
cisco	anyconnect_secure_mobility_client	2.3.254
cisco	anyconnect_secure_mobility_client	2.3.2016
cisco	anyconnect_secure_mobility_client	2.4
cisco	anyconnect_secure_mobility_client	2.4.0202
cisco	anyconnect_secure_mobility_client	2.4.1012
cisco	anyconnect_secure_mobility_client	2.5
cisco	anyconnect_secure_mobility_client	2.5.1025
cisco	anyconnect_secure_mobility_client	2.5.2001
cisco	anyconnect_secure_mobility_client	2.5.2006
cisco	anyconnect_secure_mobility_client	2.5.2010
cisco	anyconnect_secure_mobility_client	2.5.2011
cisco	anyconnect_secure_mobility_client	2.5.2014
cisco	anyconnect_secure_mobility_client	2.5.2017
cisco	anyconnect_secure_mobility_client	2.5.2018
cisco	anyconnect_secure_mobility_client	3.0
apple	mac_os_x	all versions
linux	linux_kernel	all versions

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-2040