Vulnerabilities > CVE-2021-1519 - Unspecified vulnerability in Cisco Anyconnect Secure Mobility Client

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

local

low complexity

cisco

NVD

Published: 2021-05-06

Updated: 2024-11-21

Summary

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to overwrite VPN profiles on an affected device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted IPC message to the AnyConnect process. A successful exploit could allow the attacker to modify VPN profile files. To exploit this vulnerability, the attacker must have valid credentials on the affected system.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Anyconnect Secure Mobility Client - Cisco Anyconnect Secure Mobility Client 2.0 Cisco Anyconnect Secure Mobility Client 2.1 Cisco Anyconnect Secure Mobility Client 2.2 Cisco Anyconnect Secure Mobility Client 2.2.128 Cisco Anyconnect Secure Mobility Client 2.2.133 Cisco Anyconnect Secure Mobility Client 2.2.136 Cisco Anyconnect Secure Mobility Client 2.2.140 Cisco Anyconnect Secure Mobility Client 2.3 Cisco Anyconnect Secure Mobility Client 2.3.185 Cisco Anyconnect Secure Mobility Client 2.3.254 Cisco Anyconnect Secure Mobility Client 2.3.2016 Cisco Anyconnect Secure Mobility Client 2.4 Cisco Anyconnect Secure Mobility Client 2.4.0202 Cisco Anyconnect Secure Mobility Client 2.4.1012 Cisco Anyconnect Secure Mobility Client 2.4.4004 Cisco Anyconnect Secure Mobility Client 2.4.4014 Cisco Anyconnect Secure Mobility Client 2.4.5004 Cisco Anyconnect Secure Mobility Client 2.4.7030 Cisco Anyconnect Secure Mobility Client 2.4.7073 Cisco Anyconnect Secure Mobility Client 2.5 Cisco Anyconnect Secure Mobility Client 2.5.0217 Cisco Anyconnect Secure Mobility Client 2.5.1025 Cisco Anyconnect Secure Mobility Client 2.5.2001 Cisco Anyconnect Secure Mobility Client 2.5.2006 Cisco Anyconnect Secure Mobility Client 2.5.2010 Cisco Anyconnect Secure Mobility Client 2.5.2011 Cisco Anyconnect Secure Mobility Client 2.5.2014 Cisco Anyconnect Secure Mobility Client 2.5.2017 Cisco Anyconnect Secure Mobility Client 2.5.2018 Cisco Anyconnect Secure Mobility Client 2.5.2019 Cisco Anyconnect Secure Mobility Client 2.5.3041 Cisco Anyconnect Secure Mobility Client 2.5.3046 Cisco Anyconnect Secure Mobility Client 2.5.3051 Cisco Anyconnect Secure Mobility Client 2.5.3054 Cisco Anyconnect Secure Mobility Client 2.5.3055 Cisco Anyconnect Secure Mobility Client 2.5.5112 Cisco Anyconnect Secure Mobility Client 2.5.5116 Cisco Anyconnect Secure Mobility Client 2.5.5118 Cisco Anyconnect Secure Mobility Client 2.5.5125 Cisco Anyconnect Secure Mobility Client 2.5.5130 Cisco Anyconnect Secure Mobility Client 2.5.5131 Cisco Anyconnect Secure Mobility Client 2.5.6005 Cisco Anyconnect Secure Mobility Client 3.0 Cisco Anyconnect Secure Mobility Client 3.0.0629 Cisco Anyconnect Secure Mobility Client 3.0.1047 Cisco Anyconnect Secure Mobility Client 3.0.2052 Cisco Anyconnect Secure Mobility Client 3.0.3050 Cisco Anyconnect Secure Mobility Client 3.0.3054 Cisco Anyconnect Secure Mobility Client 3.0.4235 Cisco Anyconnect Secure Mobility Client 3.0.5075 Cisco Anyconnect Secure Mobility Client 3.0.5080 Cisco Anyconnect Secure Mobility Client 3.0.07059 Cisco Anyconnect Secure Mobility Client 3.0.08057 Cisco Anyconnect Secure Mobility Client 3.0.08066 Cisco Anyconnect Secure Mobility Client 3.1\(.02043\) Cisco Anyconnect Secure Mobility Client 3.1\(.07021\) Cisco Anyconnect Secure Mobility Client 3.1\(60\) Cisco Anyconnect Secure Mobility Client 3.1.0 Cisco Anyconnect Secure Mobility Client 3.1.00495 Cisco Anyconnect Secure Mobility Client 3.2.0 Cisco Anyconnect Secure Mobility Client 4.0\(.00048\) Cisco Anyconnect Secure Mobility Client 4.0\(.00051\) Cisco Anyconnect Secure Mobility Client 4.0\(2049\) Cisco Anyconnect Secure Mobility Client 4.0.00052 Cisco Anyconnect Secure Mobility Client 4.0.00057 Cisco Anyconnect Secure Mobility Client 4.0.00061 Cisco Anyconnect Secure Mobility Client 4.1.00028 Cisco Anyconnect Secure Mobility Client 4.1.02011 Cisco Anyconnect Secure Mobility Client 4.1.04011 Cisco Anyconnect Secure Mobility Client 4.1.06013 Cisco Anyconnect Secure Mobility Client 4.1.06020 Cisco Anyconnect Secure Mobility Client 4.1.08005 Cisco Anyconnect Secure Mobility Client 4.2.0 Cisco Anyconnect Secure Mobility Client 4.2.00096 Cisco Anyconnect Secure Mobility Client 4.2.01022 Cisco Anyconnect Secure Mobility Client 4.2.01035 Cisco Anyconnect Secure Mobility Client 4.2.02075 Cisco Anyconnect Secure Mobility Client 4.2.03013 Cisco Anyconnect Secure Mobility Client 4.2.04018 Cisco Anyconnect Secure Mobility Client 4.2.04039 Cisco Anyconnect Secure Mobility Client 4.2.05015 Cisco Anyconnect Secure Mobility Client 4.2.06014 Cisco Anyconnect Secure Mobility Client 4.3.0 Cisco Anyconnect Secure Mobility Client 4.3.00748 Cisco Anyconnect Secure Mobility Client 4.3.01095 Cisco Anyconnect Secure Mobility Client 4.3.02039 Cisco Anyconnect Secure Mobility Client 4.3.03086 Cisco Anyconnect Secure Mobility Client 4.3.04027 Cisco Anyconnect Secure Mobility Client 4.4\(4027\) Cisco Anyconnect Secure Mobility Client 4.4.00243 Cisco Anyconnect Secure Mobility Client 4.5\(58\) Cisco Anyconnect Secure Mobility Client 4.5\(822\) Cisco Anyconnect Secure Mobility Client 4.5\(1044\) Cisco Anyconnect Secure Mobility Client 4.5\(2033\) Cisco Anyconnect Secure Mobility Client 4.5\(2036\) Cisco Anyconnect Secure Mobility Client 4.5\(3040\) Cisco Anyconnect Secure Mobility Client 4.5\(4029\) Cisco Anyconnect Secure Mobility Client 4.5\(5030\) Cisco Anyconnect Secure Mobility Client 4.6\(100\) Cisco Anyconnect Secure Mobility Client 4.6\(200\) Cisco Anyconnect Secure Mobility Client 4.6\(362\) Cisco Anyconnect Secure Mobility Client 4.6\(1098\) Cisco Anyconnect Secure Mobility Client 4.6\(2074\) Cisco Anyconnect Secure Mobility Client 4.8.00175 Cisco Anyconnect Secure Mobility Client 4.8.00820 Cisco Anyconnect Secure Mobility Client 4.8.00826 Cisco Anyconnect Secure Mobility Client 4.8.01090 Cisco Anyconnect Secure Mobility Client 4.8.01098 Cisco Anyconnect Secure Mobility Client 4.8.02042 Cisco Anyconnect Secure Mobility Client 4.8.02045 Cisco Anyconnect Secure Mobility Client 4.8.03036 Cisco Anyconnect Secure Mobility Client 4.8.03043 Cisco Anyconnect Secure Mobility Client 4.8.03052 Cisco Anyconnect Secure Mobility Client 4.8.03537 Cisco Anyconnect Secure Mobility Client 4.8.03538 Cisco Anyconnect Secure Mobility Client 4.8.03645 Cisco Anyconnect Secure Mobility Client 4.8.03651 Cisco Anyconnect Secure Mobility Client 4.9\(3052\) Cisco Anyconnect Secure Mobility Client 4.9\(5086\) Cisco Anyconnect Secure Mobility Client 4.9.00086 Cisco Anyconnect Secure Mobility Client 4.9.01095 Cisco Anyconnect Secure Mobility Client 4.9.02028 Cisco Anyconnect Secure Mobility Client 4.9.03047 Cisco Anyconnect Secure Mobility Client 4.9.03049 Cisco Anyconnect Secure Mobility Client 4.9.04043 Cisco Anyconnect Secure Mobility Client 4.9.04053 Cisco Anyconnect Secure Mobility Client 4.9.05042 Cisco Anyconnect Secure Mobility Client 4.9.06037	144

Summary

Vulnerable Configurations

References