CVE Feed

    Dashboard / CVE / CVE-2013-5559

    CVE-2013-5559

    Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted HTML document, aka Bug ID CSCuj58139.

    Published:Nov 4, 2013
    Last Modified:Apr 11, 2025
    EPS:Nov 4, 2013
    EPSS Score:0.01865
    CVSS Score:6.8

    Affected Products

    Vendor
    Cisco
    Product
    Anyconnect Secure Mobility Client

    Exploits

    No exploit reference

    Related CVEs

    CVE-2020-3432 (CVSS 5.6) — A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow…
    CVE-2024-20474 (CVSS 4.3) — A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could al…
    CVE-2023-20241 (CVSS 5.5) — Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could al…
    CVE-2023-20240 (CVSS 5.5) — Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could al…
    CVE-2023-20178 (CVSS 7.8) — A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows a…
    CVE-2021-40124 (CVSS 6.7) — A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Wind…
    CVE-2021-34788 (CVSS 7) — A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux a…
    CVE-2021-1567 (CVSS 7) — A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allo…
    CVE-2021-1568 (CVSS 5.5) — A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local att…
    CVE-2021-1519 (CVSS 4.7) — A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Sof…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High