Cisco
Cisco Secure Desktop: vulnerabilidades y CVE
Cisco Secure Desktop tiene 13 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE13
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2015-0691 | Alta (9.3) | 3.1% | — | 17 abr 2015 | A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001. |
| CVE-2012-4655 | Alta (9.3) | 4.6% | — | 24 sept 2012 | The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors… |
| CVE-2012-2495 | Media (4.3) | 1.4% | — | 20 jun 2012 | The HostScan downloader implementation in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 does not compare the timestamp of offered software to the timestamp of… |
| CVE-2011-0925 | Alta (9.3) | 3.3% | — | 28 feb 2011 | The CSDWebInstallerCtrl ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) allows remote attackers to download an unintended Cisco program onto a client machine, and execute this program, by… |
| CVE-2011-0926 | Alta (9.3) | 6.8% | — | 25 feb 2011 | A certain ActiveX control in CSDWebInstaller.ocx in Cisco Secure Desktop (CSD) does not properly verify the signature of an unspecified downloaded program, which allows remote attackers to execute arbitrary code by… |
| CVE-2009-5008 | Baja (2.1) | 0.35% | — | 14 oct 2010 | Cisco Secure Desktop (CSD), when used in conjunction with an AnyConnect SSL VPN server, does not properly perform verification, which allows local users to bypass intended policy restrictions via a modified executable… |
| CVE-2010-0589 | Alta (9.3) | 4.8% | — | 15 abr 2010 | The Web Install ActiveX control (CSDWebInstaller) in Cisco Secure Desktop (CSD) before 3.5.841 does not properly verify the signatures of downloaded programs, which allows remote attackers to force the download and… |
| CVE-2010-0440 | Media (4.3) | 4.7% | — | 3 feb 2010 | Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.2(1), 8.1(2.7), and 8.0(5); allows remote… |
| CVE-2006-5806 | Baja (2.1) | 0.34% | — | 8 nov 2006 | SSL VPN Client in Cisco Secure Desktop before 3.1.1.45, when configured to spawn a web browser after a successful connection, stores sensitive browser session information in a directory outside of the CSD vault and does… |
| CVE-2006-5807 | Media (4.6) | 0.34% | — | 8 nov 2006 | Cisco Secure Desktop (CSD) before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka "System Policy Evasion". |
| CVE-2006-5808 | Media (4.6) | 0.36% | — | 8 nov 2006 | The installation of Cisco Secure Desktop (CSD) before 3.1.1.45 uses insecure default permissions (all users full control) for the CSD directory and its parent directory, which allow local users to gain privileges by… |
| CVE-2006-5393 | Media (5.5) | 0.31% | — | 18 oct 2006 | Cisco Secure Desktop (CSD) does not require that the ClearPageFileAtShutdown (aka CCE-Winv2.0-407) registry value equals 1, which might allow local users to read certain memory pages that were written during another… |
| CVE-2006-5394 | Baja (2.1) | 0.33% | — | 18 oct 2006 | The default configuration of Cisco Secure Desktop (CSD) has an unchecked "Disable printing" box in Secure Desktop Settings, which might allow local users to read data that was sent to a printer during another user's SSL… |