CVE-2013-1172: The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not...

Security readout for executives and security teams

This is a local privilege escalation issue in Cisco AnyConnect Secure Mobility Client. A person who already has local access to a machine may be able to gain higher privileges because the Cisco Security Service did not properly verify files. Exposure is most likely on endpoints with Cisco AnyConnect Secure Mobility Client installed, especially where non-admin local users can log in. The supplied sources do not identify exact affected versions or platforms. Treat this as a targeted endpoint hardening issue, not an internet-wide emergency. Prioritize environments where AnyConnect is broadly deployed on shared, privileged, or administrator-used machines. Mitigation focus: Review Cisco’s advisory for affected and fixed AnyConnect versions.; Upgrade or remove affected AnyConnect installations per Cisco guidance.; Limit local interactive access on systems running affected clients..

Prepared

Jun 24, 2026, 11:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.