CVE-2011-2678: The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHOR...

Security readout for executives and security teams

This issue affects specific Cisco VPN Client builds on 64-bit Windows. A local user could replace the VPN service executable because its file permissions were too broad, then gain higher privileges when that executable runs. It is not a remote internet-facing flaw, but it matters on endpoints where untrusted or lower-privileged users have access. Exposure is limited to 64-bit Windows systems running Cisco VPN Client 5.0.7.0240 or 5.0.7.0290. Organizations with legacy VPN clients on workstations, shared systems, or jump hosts are more likely to be affected. Treat this as a legacy endpoint hardening issue. Prioritize systems where shared access, contractor use, or lower-trust users exist. It is not KEV-listed in the provided bundle, but it can turn local access into broader endpoint control. Mitigation focus: Identify and remove affected Cisco VPN Client builds where possible.; Check Cisco support guidance for corrected versions or migration paths.; Restrict write permissions on the VPN client executable path..

Prepared

Jun 27, 2026, 18:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.