Every CVESearch/Get API key

CVE-2015-0663

Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement...

6.6 Medium

CVE-2015-0663 is a medium vulnerability (CVSS 6.6) in Cisco Anyconnect Secure Mobility Client, published March 17, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. No source names a fixed version.

Severity
6.6 MediumCVSS 2.0, NVD
Exploit chance
0.34%EPSS, 27th percentile
Exploitation
None knownNot on CISA’s or ENISA’s lists
Fixed in
No fix listedNo source names one

Description

Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392.

Exploit likelihood

0.34%Down 0.5 points since Feb 4, 2022
90%50%10%1%

Affected products

What each source reports

NVD Score used6.6

Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392.

Record
CVE-2015-0663
CVSS 2.0
6.6 MediumAV:L/AC:L/Au:N/C:N/I:C/A:C
Weakness
CWE-264
Updated
2026-11-02
CVE ListNo score

Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392.

Record
CVE-2015-0663
Updated
2026-11-02
EUVDEUVD-2015-0676No score

Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392.

Record
EUVD-2015-0676
Updated
2026-11-03
GitHub AdvisoriesGHSA-w677-pf97-rqh8No score

Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement...

Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392.

Record
GHSA-w677-pf97-rqh8
Updated
2026-11-02

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

MoveEnter Open