CVE-2015-0663: Cisco AnyConnect Secure Mobility Client

Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392.

Affected products

• Cisco AnyConnect Secure Mobility Client: up to and including 4.0\(.00051\)

Published 2015-03-17. Last modified 2026-06-17.