Read the docs
TI-2015-05309 Aliases CVE-2015-6322GHSA-wgf2-prq4-m36f

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows…

Priority LOW 29CWE-264Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.

Why it matters now

EPSS 0.00383 32nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 52

CPEVersionsRoleVendor
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.0.0343:*:*:*:*:*:*:*2.0.0343VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.1.0148:*:*:*:*:*:*:*2.1.0148VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.0133:*:*:*:*:*:*:*2.2.0133VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.0136:*:*:*:*:*:*:*2.2.0136VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.0140:*:*:*:*:*:*:*2.2.0140VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.3.0185:*:*:*:*:*:*:*2.3.0185VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.3.0254:*:*:*:*:*:*:*2.3.0254VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.3.1003:*:*:*:*:*:*:*2.3.1003VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.3.2016:*:*:*:*:*:*:*2.3.2016VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.4.0202:*:*:*:*:*:*:*2.4.0202VulnerableCisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.0.0343:*:*:*:*:*:*:* Versions 2.0.0343 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.1.0148:*:*:*:*:*:*:* Versions 2.1.0148 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.0133:*:*:*:*:*:*:* Versions 2.2.0133 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.0136:*:*:*:*:*:*:* Versions 2.2.0136 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.0140:*:*:*:*:*:*:* Versions 2.2.0140 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.3.0185:*:*:*:*:*:*:* Versions 2.3.0185 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.3.0254:*:*:*:*:*:*:* Versions 2.3.0254 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.3.1003:*:*:*:*:*:*:* Versions 2.3.1003 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.3.2016:*:*:*:*:*:*:* Versions 2.3.2016 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.4.0202:*:*:*:*:*:*:* Versions 2.4.0202 Vulnerable ·Cisco
Show 42 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.4.1012:*:*:*:*:*:*:*2.4.1012VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.0217:*:*:*:*:*:*:*2.5.0217VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2006:*:*:*:*:*:*:*2.5.2006VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2010:*:*:*:*:*:*:*2.5.2010VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2011:*:*:*:*:*:*:*2.5.2011VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2014:*:*:*:*:*:*:*2.5.2014VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2017:*:*:*:*:*:*:*2.5.2017VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2018:*:*:*:*:*:*:*2.5.2018VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2019:*:*:*:*:*:*:*2.5.2019VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.3041:*:*:*:*:*:*:*2.5.3041VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.3046:*:*:*:*:*:*:*2.5.3046VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.3051:*:*:*:*:*:*:*2.5.3051VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.3054:*:*:*:*:*:*:*2.5.3054VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.3055:*:*:*:*:*:*:*2.5.3055VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5_base:*:*:*:*:*:*:*2.5_baseVulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.0:*:*:*:*:*:*:*3.0.0VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.0629:*:*:*:*:*:*:*3.0.0629VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.1047:*:*:*:*:*:*:*3.0.1047VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.2052:*:*:*:*:*:*:*3.0.2052VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.3050:*:*:*:*:*:*:*3.0.3050VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.3054:*:*:*:*:*:*:*3.0.3054VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.4235:*:*:*:*:*:*:*3.0.4235VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.5075:*:*:*:*:*:*:*3.0.5075VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.5080:*:*:*:*:*:*:*3.0.5080VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.09231:*:*:*:*:*:*:*3.0.09231VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.09266:*:*:*:*:*:*:*3.0.09266VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.09353:*:*:*:*:*:*:*3.0.09353VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1\(60\):*:*:*:*:*:*:*3.1(60)VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.0:*:*:*:*:*:*:*3.1.0VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.02043:*:*:*:*:*:*:*3.1.02043VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.05182:*:*:*:*:*:*:*3.1.05182VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.05187:*:*:*:*:*:*:*3.1.05187VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.06073:*:*:*:*:*:*:*3.1.06073VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.07021:*:*:*:*:*:*:*3.1.07021VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\(48\):*:*:*:*:*:*:*4.0(48)VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\(64\):*:*:*:*:*:*:*4.0(64)VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\(2049\):*:*:*:*:*:*:*4.0(2049)VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.0:*:*:*:*:*:*:*4.0.0VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.00048:*:*:*:*:*:*:*4.0.00048VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.00051:*:*:*:*:*:*:*4.0.00051VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.1\(8\):*:*:*:*:*:*:*4.1(8)VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.1.0:*:*:*:*:*:*:*4.1.0VulnerableCisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.4.1012:*:*:*:*:*:*:* Versions 2.4.1012 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.0217:*:*:*:*:*:*:* Versions 2.5.0217 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2006:*:*:*:*:*:*:* Versions 2.5.2006 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2010:*:*:*:*:*:*:* Versions 2.5.2010 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2011:*:*:*:*:*:*:* Versions 2.5.2011 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2014:*:*:*:*:*:*:* Versions 2.5.2014 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2017:*:*:*:*:*:*:* Versions 2.5.2017 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2018:*:*:*:*:*:*:* Versions 2.5.2018 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.2019:*:*:*:*:*:*:* Versions 2.5.2019 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.3041:*:*:*:*:*:*:* Versions 2.5.3041 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.3046:*:*:*:*:*:*:* Versions 2.5.3046 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.3051:*:*:*:*:*:*:* Versions 2.5.3051 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.3054:*:*:*:*:*:*:* Versions 2.5.3054 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5.3055:*:*:*:*:*:*:* Versions 2.5.3055 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.5_base:*:*:*:*:*:*:* Versions 2.5_base Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.0:*:*:*:*:*:*:* Versions 3.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.0629:*:*:*:*:*:*:* Versions 3.0.0629 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.1047:*:*:*:*:*:*:* Versions 3.0.1047 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.2052:*:*:*:*:*:*:* Versions 3.0.2052 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.3050:*:*:*:*:*:*:* Versions 3.0.3050 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.3054:*:*:*:*:*:*:* Versions 3.0.3054 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.4235:*:*:*:*:*:*:* Versions 3.0.4235 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.5075:*:*:*:*:*:*:* Versions 3.0.5075 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.5080:*:*:*:*:*:*:* Versions 3.0.5080 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.09231:*:*:*:*:*:*:* Versions 3.0.09231 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.09266:*:*:*:*:*:*:* Versions 3.0.09266 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.0.09353:*:*:*:*:*:*:* Versions 3.0.09353 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1\(60\):*:*:*:*:*:*:* Versions 3.1(60) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.0:*:*:*:*:*:*:* Versions 3.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.02043:*:*:*:*:*:*:* Versions 3.1.02043 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.05182:*:*:*:*:*:*:* Versions 3.1.05182 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.05187:*:*:*:*:*:*:* Versions 3.1.05187 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.06073:*:*:*:*:*:*:* Versions 3.1.06073 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:3.1.07021:*:*:*:*:*:*:* Versions 3.1.07021 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\(48\):*:*:*:*:*:*:* Versions 4.0(48) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\(64\):*:*:*:*:*:*:* Versions 4.0(64) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0\(2049\):*:*:*:*:*:*:* Versions 4.0(2049) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.0:*:*:*:*:*:*:* Versions 4.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.00048:*:*:*:*:*:*:* Versions 4.0.00048 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.0.00051:*:*:*:*:*:*:* Versions 4.0.00051 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.1\(8\):*:*:*:*:*:*:* Versions 4.1(8) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2015-6322
  2. 2026-10-03 Alias added: GHSA-wgf2-prq4-m36f

References

Advisory 1

  • TI-2020-02982 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability KEVCVSS 3.1HIGH 7.8
  • TI-2020-02715 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability KEVCVSS 3.1MEDIUM 6.5
  • TI-2011-01789 The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect… CVSS 2.0HIGH 7.6
  • TI-2011-01790 The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect… CVSS 2.0HIGH 9.3
  • TI-2012-02179 The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure… CVSS 2.0HIGH 9.3
  • TI-2023-06884 Incorrect default permissions in Cisco Secure Client CVSS 3.1HIGH 7.8
See all 68 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences