NVD

Id
22315  
Name
CVE-2016-9192  
Description
A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected Releases: 4.3(2039) 4.3(748). Known Fixed Releases: 4.3(4019) 4.4(225).  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-12-13  
Modified Date
2016-12-22  
Seq
2016-9192  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
118677 22315 CVE-2016-9192 94770  View
118678 22315 CVE-2016-9192 1037409  View
118679 22315 CVE-2016-9192 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-anyconnect1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64539 JVNDB-2016-006314 Windows 用 Cisco AnyConnect Secure Mobility Client における任意の実行可能なファイルをインストールされる脆弱性 Windows 用 Cisco AnyConnect Secure Mobility Client には、任意の実行可能なファイルをインストールされ、実行される脆弱性が存在します。 CVE-2016-9192 95699 CVE-2016-9192 22315 7.2 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006314.html 2016-12-07 2016-12-20 View