CVE-2013-1172: Cisco AnyConnect Secure Mobility Client

Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days.

The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153.

Affected products

• Cisco AnyConnect Secure Mobility Client: affected versions not specified; version 2.0 only; version 2.1 only; version 2.2 only; version 2.2.128 only; version 2.2.133 only; …

Published 2013-04-11. Last modified 2026-06-16.