{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T11:03:52Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20120809-CVE-2012-2498","slug":"cisco-sa-20120809-cve-2012-2498","vendor":"Cisco","title":"Cisco AnyConnect Secure Mobility Client Man-in-the-Middle Attack Vulnerability","summary":"Cisco AnyConnect Secure Mobility Client contains a vulnerability that could allow an unauthenticated, remote attacker to conduct man-in-the-middle attacks. The vulnerability is due insufficient validation of certificates to be accepted by end users. An unauthenticated, remote attacker can exploit this vulnerability to impersonate trusted servers via crafted certificates. If successful, the attacker could launch further attacks. Cisco has confirmed this vulnerability and released software updates. Exploits of this vulnerability may require user interaction. An attacker could convince a user to visit a malicious website using a certificate that may be displayed as valid for a legitimate site. In addition, the user must be connected via the Cisco AnyConnect Secure Mobility Client for an attacker to have an attack vector to exploit this vulnerability. Cisco indicates through the CVSS score that proof-of-concept exploit code exists; however, the code is not known to be publicly available.","severity":"Medium","published_at":"2012-08-09T21:31:35Z","updated_at":"2012-08-09T21:31:35Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120809-CVE-2012-2498","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20120809-CVE-2012-2498/csaf/Cisco-SA-20120809-CVE-2012-2498.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.00482},"cves":[{"id":"CVE-2012-2498","kev":false,"epss":{"score":0.00482,"percentile":0.38425,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"}}],"public_evidence":[{"product":{"name":"Cisco AnyConnect Secure Mobility Client","slug":"cisco-anyconnect-secure-mobility-client","vendor":"Cisco"},"cve":{"id":"CVE-2012-2498"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:36:45Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco AnyConnect Secure Mobility Client","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.00482,"score_date":"2026-07-19","updated_at":"2026-07-20T05:46:47Z"},"published_at":"2012-08-09T21:31:35Z","updated_at":"2012-08-09T21:31:35Z","advisory_updated_at":"2012-08-09T21:31:35Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20120809-CVE-2012-2498","row_display_order":1}]}