CVE-2015-0663: Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier does not properly implement access control...

Security readout for executives and security teams

Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier had a local access-control flaw in how it handled IPC messages. A person already able to run code as a local user could cause arbitrary files to be written. The bundle does not provide CVSS, confirmed exploitation, or a named patch. Exposure is limited to endpoints running Cisco AnyConnect Secure Mobility Client 4.0(.00051) or earlier. The bundle does not identify CPEs, platforms, or deployment conditions, so inventory validation is required before scoping. Address during normal vulnerability remediation unless outdated AnyConnect clients run on high-value or multi-user endpoints. The issue requires local access, but arbitrary file write can become operationally significant on managed enterprise workstations. Mitigation focus: Identify endpoints running Cisco AnyConnect Secure Mobility Client 4.0(.00051) or earlier.; Check Cisco advisory guidance for fixed versions or vendor-recommended remediation.; Prioritize upgrades on shared workstations, privileged admin systems, and remote-access endpoints..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.