CVE-2011-2041

high Cisco
CVSS v3 Base Score
7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
0.1%
Exploitation probability in 30 days
Top 80% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: June 2, 2011 (5459 days ago)
Last Modified: April 29, 2026
Vendor: Cisco
Source: NVD

Description

The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556.

CWE

CWE-264

Affected Products

cisco anyconnect secure mobility client

References

🔗 osvdb.org 🔗 www.cisco.com 🔗 www.securityfocus.com 🔗 www.securitytracker.com 🔗 osvdb.org