CVE-2016-6369

—

CVSS 3.0

7.8 high

EPSS

<1%p33

Published

Aug 25, 2016 (Aug 25, 2016)

Modified

Jun 17, 2026

Description

Cisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles pathnames, which allows local users to gain privileges via a crafted INF file, aka Bug ID CSCuz92464.

Vendors: cisco
Products: anyconnect secure mobility client
Weakness: CWE-264
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.