Vulnslist

find the latest Cisco vulnerabilities

Cisco AnyConnect Secure Mobility Client Man-in-the-Middle Attack Vulnerability

Cisco-SA-20120809-CVE-2012-2498 · Medium · Published · Updated

Cisco AnyConnect Secure Mobility Client contains a vulnerability that could allow an unauthenticated, remote attacker to conduct man-in-the-middle attacks. The vulnerability is due insufficient validation of certificates to be accepted by end users. An unauthenticated, remote attacker can exploit this vulnerability to impersonate trusted servers via crafted certificates. If successful, the attacker could launch further attacks. Cisco has confirmed this vulnerability and released software updates. Exploits of this vulnerability may require user interaction. An attacker could convince a user to visit a malicious website using a certificate that may be displayed as valid for a legitimate site. In addition, the user must be connected via the Cisco AnyConnect Secure Mobility Client for an attacker to have an attack vector to exploit this vulnerability. Cisco indicates through the CVSS score that proof-of-concept exploit code exists; however, the code is not known to be publicly available.

Cisco advisory ·CSAF JSON

Workarounds

Administrators are advised to apply the appropriate updates.

Users are advised not to open e-mail messages from suspicious or unrecognized sources. If users cannot verify that links or attachments included in e-mail messages are safe, they are advised not to open them.

Administrators are advised to allow only trusted users to have network access.

Administrators are advised to monitor affected systems.

CVEsCVE-2012-2498
Cisco Bug IDsNA
CVSS ScoreBase 4.3
Base 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N/E:POC/RL:OF/RC:C
Product Names From Source
Cisco AnyConnect Secure Mobility Client, Cisco Secure Client

Related Products

Product CVE Evidence
Cisco Secure Client CVE-2012-2498 Cisco OpenVuln
Cisco AnyConnect Secure Mobility Client CVE-2012-2498 Cisco OpenVuln