CVE-2012-2498: Cisco AnyConnect Secure Mobility Client

Medium severity, CVSS 4.0. EPSS: 0.5% chance of exploitation in the next 30 days.

Cisco AnyConnect Secure Mobility Client 3.0 through 3.0.08066 does not ensure that authentication makes use of a legitimate certificate, which allows user-assisted man-in-the-middle attackers to spoof servers via a crafted certificate, aka Bug ID CSCtz29197.

Affected products

• Cisco AnyConnect Secure Mobility Client: version 3.0 only; version 3.0.0629 only; version 3.0.07059 only; version 3.0.08057 only; version 3.0.08066 only

Published 2012-08-06. Last modified 2026-06-16.