CVE-2015-6305: Cisco AnyConnect Secure Mobility Client

High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in the CMainThread::launchDownloader function in vpndownloader.exe in Cisco AnyConnect Secure Mobility Client 2.0 through 4.1 on Windows allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by dbghelp.dll, aka Bug ID CSCuv01279. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-4211.

Affected products

• Cisco AnyConnect Secure Mobility Client: version 2.0.0343 only; version 2.1.0.148 only; version 2.2.0133 only; version 2.2.0136 only; version 2.2.0140 only; version 2.3.0185 only; …

Published 2015-09-26. Last modified 2026-06-17.