Skip to main content

Vpn Client CVE-2012-3052

MEDIUM
2012-09-16 psirt@cisco.com
6.9
CVSS 2.0 · NVD
Share

Severity by source

NVD PRIMARY
6.9 MEDIUM
AV:L/AC:M/Au:N/C:C/I:C/A:C

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:L/AC:M/Au:N/C:C/I:C/A:C
Attack Vector
Local
Attack Complexity
M
Confidentiality
C
Integrity
C
Availability
C

Lifecycle Timeline

1
CVE Published
Sep 16, 2012 - 10:34 cve.org
MEDIUM 6.9

DescriptionCVE.org

Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747.

AnalysisAI

Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747. Rated medium severity (CVSS 6.9). No vendor patch available.

Technical ContextAI

Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747. Affected products include: Cisco Vpn Client.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2020-13417 CRITICAL POC
9.8 May 22

An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CV

CVE-2019-17388 HIGH POC
7.8 Dec 05

Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allo

CVE-2019-17387 HIGH POC
7.8 Dec 05

An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated

CVE-2019-6724 HIGH POC
7.8 Mar 21

The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a

CVE-2015-7600 HIGH POC
7.2 Oct 06

Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privi

CVE-2019-6145 MEDIUM POC
6.7 Sep 20

Forcepoint VPN Client for Windows versions lower than 6.6.1 have an unquoted search path vulnerability. Rated medium sev

CVE-2020-13413 MEDIUM POC
5.3 May 22

An issue was discovered in Aviatrix Controller before 5.4.1204. Rated medium severity (CVSS 5.3), this vulnerability is

CVE-2025-12694 HIGH
8.5 Jun 04

Local privilege escalation in Forcepoint VPN Client for Windows versions 6.11.3 and prior allows an authenticated low-pr

CVE-2021-31776 HIGH
7.8 Apr 29

Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the

CVE-2012-5429 MEDIUM
4.6 Jan 17

The VPN driver in Cisco VPN Client on Windows does not properly interact with the kernel, which allows local users to ca

Share

CVE-2012-3052 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy