CVE编号
CVE-2016-6369利用情况
暂无补丁情况
N/A披露时间
2016-08-26漏洞描述
Cisco AnyConnect Secure Mobility Client是美国思科（Cisco）公司的一款可通过任何设备安全访问网络和应用的安全移动客户端。Cisco AnyConnect Secure Mobility Client 4.2.05015和4.3.02039之前的版本中存在本地权限提升漏洞。本地攻击者可利用该漏洞以SYSTEM权限执行任意命令。
解决建议
目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160824-anyconnect
参考链接 |
|
|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa... | |
| http://www.securityfocus.com/bid/92625 | |
| http://www.securitytracker.com/id/1036697 |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.0.0343 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.1.0148 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.2.0133 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.2.0136 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.2.0140 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.3.0185 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.3.0254 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.3.1003 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.3.2016 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.4.0202 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.4.1012 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5.0217 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5.2006 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5.2010 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5.2011 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5.2014 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5.2017 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5.2018 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5.2019 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5.3041 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5.3046 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5.3051 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5.3054 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5.3055 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 2.5_base | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.0.0 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.0.0629 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.0.09231 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.0.09266 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.0.09353 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.0.1047 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.0.2052 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.0.3050 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.0.3054 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.0.4235 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.0.5075 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.0.5080 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.1(60) | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.1.0 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.1.02043 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.1.05182 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.1.05187 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.1.06073 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 3.1.07021 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 4.0(2049) | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 4.0(48) | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 4.0(64) | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 4.0.0 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 4.0.00048 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 4.0.00051 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 4.1(8) | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 4.1.0 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 4.2.0 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 4.2.04039 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 4.3.0 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 4.3.00748 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | cisco | anyconnect_secure_mobility_client | 4.3.01095 | - | |||||
- 攻击路径 本地
- 攻击复杂度 低
- 权限要求 低
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 高
- 完整性 高
还没有评论，来说两句吧...