CVE-2015-0664: The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier allows local users to wr...

Security readout for executives and security teams

This is a local privilege escalation issue in Cisco AnyConnect Secure Mobility Client 4.0(.00051) and earlier. A person who already has local access to the machine could abuse the client’s IPC channel to gain higher privileges. The bundle does not show active exploitation or a CVSS score. Exposure is limited to endpoints running Cisco AnyConnect Secure Mobility Client 4.0(.00051) or earlier. Internet-facing appliances are not described as affected; the attacker must be local according to the CVE text. Treat this as a targeted endpoint hardening priority, not a broad remote compromise emergency. Remediate affected VPN clients promptly because local privilege escalation can turn a foothold into full workstation control. Mitigation focus: Inventory Cisco AnyConnect Secure Mobility Client versions across managed endpoints.; Review the Cisco advisory for fixed versions or vendor-approved remediation.; Prioritize remediation for shared, high-risk, or administrator-used workstations..

Prepared

Jun 13, 2026, 22:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.