CVE Feed

    Dashboard / CVE / CVE-2016-6369

    CVE-2016-6369

    Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464.

    Published:Aug 25, 2016
    Last Modified:Apr 12, 2025
    EPS:Aug 25, 2016
    EPSS Score:0.00099
    CVSS Score:7.8

    Affected Products

    Vendor
    Cisco
    Product
    Anyconnect Secure Mobility Client

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2020-3432 (CVSS 5.6) — A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow…
    CVE-2024-20474 (CVSS 4.3) — A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could al…
    CVE-2023-20241 (CVSS 5.5) — Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could al…
    CVE-2023-20240 (CVSS 5.5) — Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could al…
    CVE-2023-20178 (CVSS 7.8) — A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows a…
    CVE-2021-40124 (CVSS 6.7) — A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Wind…
    CVE-2021-34788 (CVSS 7) — A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux a…
    CVE-2021-1567 (CVSS 7) — A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allo…
    CVE-2021-1568 (CVSS 5.5) — A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local att…
    CVE-2021-1519 (CVSS 4.7) — A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Sof…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High