CVE-2016-6369 2016-08-31 20:39:40 Cisco AnyConnect Secure Mobility Client Local Privilege Escalation Vulnerability漏洞银行丨0DAY BANK

Cisco AnyConnect is a VPN Client for multiple platforms.

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account.

Affected Versions:
Cisco AnyConnect Secure Mobility before 4.2.05015 and 4.3.x before 4.3.02039

On successful exploitation it allows local users to gain privileges via a crafted INF file.

There are no solution that address this vulnerability. Workaround:
There are no workarounds that address this vulnerability.