CVE Feed

    Dashboard / CVE / CVE-2017-12268

    CVE-2017-12268

    A vulnerability in the Network Access Manager (NAM) of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to enable multiple network adapters, aka a Dual-Homed Interface vulnerability. The vulnerability is due to insufficient NAM policy enforcement. An attacker could exploit this vulnerability by manipulating network interfaces of the device to allow multiple active network interfaces. A successful exploit could allow the attacker to send traffic over a non-authorized network interface. Cisco Bug IDs: CSCvf66539.

    Published:Oct 5, 2017
    Last Modified:Apr 20, 2025
    EPS:Oct 5, 2017
    EPSS Score:0.00072
    CVSS Score:6.5

    Affected Products

    Vendor
    Cisco
    Product
    Anyconnect Secure Mobility Client

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2020-3432 (CVSS 5.6) — A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow…
    CVE-2024-20474 (CVSS 4.3) — A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could al…
    CVE-2023-20241 (CVSS 5.5) — Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could al…
    CVE-2023-20240 (CVSS 5.5) — Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could al…
    CVE-2023-20178 (CVSS 7.8) — A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows a…
    CVE-2021-40124 (CVSS 6.7) — A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Wind…
    CVE-2021-34788 (CVSS 7) — A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux a…
    CVE-2021-1567 (CVSS 7) — A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allo…
    CVE-2021-1568 (CVSS 5.5) — A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local att…
    CVE-2021-1519 (CVSS 4.7) — A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Sof…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High