Back
CVE-2015-6322
The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access…
Medium6.6EPSS 0.38%
- Published
- Updated
- Reserved
- Assigned by
- cisco
Description
The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions and move arbitrary files by leveraging the lack of source-path validation, aka Bug ID CSCuv48563.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium6.6 | AV:L/AC:L/Au:N/C:N/I:C/A:C |
- EPSS (exploitation in 30 days)
- 0.38% · top 68% of all CVEs (3 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.6.
Weakness
Affected products
n/a
- affected n/a
References (2)
- 20151008 Cisco AnyConnect Secure Mobility Client Arbitrary File Move Vulnerability (opens in a new tab)vendor-advisoryx_refsource_CISCOx_transferred
- 1033785 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2015-6322)Record last updated .