CVE-2011-2040 Code injection in n/a
Remote attackers can execute arbitrary code on Linux and Mac OS X systems by exploiting a lack of authenticity verification in the Cisco AnyConnect client's download mechanism.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2011-2040?
CVE-2011-2040 is a critical code injection vulnerability in Cisco Anyconnect Secure Mobility Client, published on 2 Jun 2011. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a Java applet, aka Bug ID CSCsy05934.
Weakness: CWE-20
Which versions are affected by CVE-2011-2040?
It affects 1 product.
Products include Cisco Anyconnect Secure Mobility Client.
How do I fix CVE-2011-2040?
No fix has been published for CVE-2011-2040 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2011-2040 being exploited?
There is no known exploitation of CVE-2011-2040 in the wild and no public exploit code.
Other vulnerabilities in Cisco Anyconnect Secure Mobility Client
- CVE-2020-3433 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking
- CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path
- CVE-2012-3088 Security feature bypass in n/a
- CVE-2012-2493 Code injection in n/a
- CVE-2023-20178 Privilege escalation in Cisco Secure Client
Sources
Also known as GHSA-qh85-rfph-r6p5.