CVE-2015-6305 Privilege escalation in n/a

What is CVE-2015-6305?

CVE-2015-6305 is a high-severity vulnerability in Cisco Anyconnect Secure Mobility Client, published on 25 Sep 2015. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConnect Secure Mobility Client 2.0 through 4.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by dbghelp.dll, aka Bug ID CSCuv01279. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4211.

Weakness: CWE-426

Which versions are affected by CVE-2015-6305?

It affects 1 product.

Products include Cisco Anyconnect Secure Mobility Client.

How do I fix CVE-2015-6305?

No fix has been published for CVE-2015-6305 yet. Limit exposure of the affected software until one is available.

Is CVE-2015-6305 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2015-6305 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in Cisco Anyconnect Secure Mobility Client

• CVE-2020-3433 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Exploited High 7.8
• CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Exploited Medium 6.5
• CVE-2012-3088 Security feature bypass in n/a Critical 9.3
• CVE-2012-2493 Code injection in n/a Critical 9.3
• CVE-2011-2040 Code injection in n/a Critical 9.3

All Cisco Anyconnect Secure Mobility Client vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-78jc-x38p-j87v.