CVE-2016-9192
HighSummary
A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account.
Risk Assessment
An attacker could exploit this vulnerability to gain full control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to upgrade to version 4.3(4019) or 4.4(225) to mitigate this vulnerability.
Other vulnerabilities in Cisco AnyConnect Secure Mobility Client for Windows
Original NVD description (English source)
A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected Releases: 4.3(2039) 4.3(748). Known Fixed Releases: 4.3(4019) 4.4(225).