CVE-2009-5008: Cisco Secure Desktop

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable file.

Affected products

• Cisco Secure Desktop: any version

Published 2010-10-14. Last modified 2026-06-16.