CVE-2012-2494 Security feature bypass in n/a
Remote attackers can force a version downgrade of the Cisco AnyConnect client by offering signed older code via ActiveX or Java, bypassing security updates.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2012-2494?
CVE-2012-2494 is a medium-severity vulnerability in Cisco Anyconnect Secure Mobility Client, published on 20 Jun 2012. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 and 3.x before 3.0 MR8 does not compare the timestamp of offered software to the timestamp of installed software, which allows remote attackers to force a version downgrade by using (1) ActiveX or (2) Java components to offer signed code that corresponds to an older software release, aka Bug ID CSCtw48681.
Weakness: CWE-20
Which versions are affected by CVE-2012-2494?
It affects 1 product.
Products include Cisco Anyconnect Secure Mobility Client.
How do I fix CVE-2012-2494?
No fix has been published for CVE-2012-2494 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-2494 being exploited?
There is no known exploitation of CVE-2012-2494 in the wild and no public exploit code.
Other vulnerabilities in Cisco Anyconnect Secure Mobility Client
Sources
Also known as GHSA-52cj-532j-rfcv.