CVE Feed

    Dashboard / CVE / CVE-2012-2498

    CVE-2012-2498

    Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.

    Published:Aug 6, 2012
    Last Modified:Apr 11, 2025
    EPS:Aug 6, 2012
    EPSS Score:0.00103
    CVSS Score:4

    Affected Products

    Vendor
    Cisco
    Product
    Anyconnect Secure Mobility Client

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2020-3432 (CVSS 5.6) — A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow…
    CVE-2024-20474 (CVSS 4.3) — A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could al…
    CVE-2023-20241 (CVSS 5.5) — Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could al…
    CVE-2023-20240 (CVSS 5.5) — Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could al…
    CVE-2023-20178 (CVSS 7.8) — A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows a…
    CVE-2021-40124 (CVSS 6.7) — A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Wind…
    CVE-2021-34788 (CVSS 7) — A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux a…
    CVE-2021-1567 (CVSS 7) — A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allo…
    CVE-2021-1568 (CVSS 5.5) — A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local att…
    CVE-2021-1519 (CVSS 4.7) — A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Sof…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High