CVE-2015-4289: Cisco AnyConnect Secure Mobility Client

Medium severity, CVSS 6.4. EPSS: 1.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Cisco AnyConnect Secure Mobility Client 4.0(2049) allows remote head-end systems to write to arbitrary files via a crafted configuration attribute, aka Bug ID CSCut93920.

Affected products

• Cisco AnyConnect Secure Mobility Client: version 4.0(2049) only

Published 2015-08-01. Last modified 2026-06-17.