CVE-2012-3052: Cisco VPN Client

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747.

Affected products

• Cisco VPN Client: version 5.0 only; version 5.0.01 only; version 5.0.01.0600 only; version 5.0.2 only; version 5.0.02.0090 only; version 5.0.2.0090 only; …

Published 2012-09-16. Last modified 2026-06-16.