CVE-2013-1173: Cisco AnyConnect Secure Mobility Client

Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143.

Affected products

• Cisco AnyConnect Secure Mobility Client: affected versions not specified; version 2.0 only; version 2.1 only; version 2.2 only; version 2.2.128 only; version 2.2.133 only; …

Published 2013-04-11. Last modified 2026-06-16.