CVE-2013-1172: cisco anyconnect_secure_mobility_client Improper Input Validation

Vulnerability summary

CVE-2013-1172 is a medium (CVSS 6.6) Improper Input Validation vulnerability in cisco anyconnect_secure_mobility_client. EPSS estimates a 0.33% chance of exploitation in the next 30 days, higher than 24% of scored vulnerabilities.

Timeline

1. 11-04-2013
   PublishedVulnerability first disclosed.
2. 17-09-2024
   Last modifiedVulnerability information updated.

Description

The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153.

• CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.