« Volver al listado

CVE-2012-3052

Estado: ModificadaMedia (6.9)—

Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — VPN Client

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2012-3052",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2012-09-16T10:34:50.457",
  "references": [
    {
      "url": "http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/release/notes/anyconnect31rn.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Untrusted search path vulnerability in Cisco VPN Client 5.0 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka Bug ID CSCua28747."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de path de búsqueda no confiable en Cisco VPN Client v5.0 permite a usuarios locales obtener privilegios a través de un fichero .dll troyanizado en el directorio de trabajo actual también conocido como Bug ID CSCua28747."
    }
  ],
  "lastModified": "2026-06-16T23:42:33.367",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4F8D296-8C41-4ACF-97A1-B046CE18C623"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A241A0DC-E0C0-40FF-825F-3BFD04EF05C4"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.01.0600:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "58FB3744-3107-410F-8E03-228060A95018"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "51BB77A8-9610-4622-855E-F41D4DE8BF98"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.02.0090:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7093F844-3939-481C-9D76-DC9812309474"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.2.0090:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB3D6BB1-BDCB-46A1-A213-17CB1F46683F"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.03.0530:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F1845EE7-185C-4537-B968-10F1E20082B8"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.03.0560:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0D44782-3DD1-45DA-9457-8B6D07E12B5B"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.04.0300:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9FED413-4C1E-45C2-B2CC-5C70079B00F8"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FDA1A681-3063-4894-BA84-846CFCE35D54"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.05.0290:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BBC5508A-92AC-437A-A55E-2A864A757BFC"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7072DB27-CFE9-4D5D-A912-608A719E72CF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.06.0160:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54DE7A64-BF7C-4062-9315-18AD3D5F6FD3"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34B077DB-FBD7-4B15-B682-5A8912A07727"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.07.0290:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "465D80AD-7622-440F-BFF5-C94C62A3E905"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.07.0410:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F8659A2-717E-4D8B-8877-B0FACF39C599"
            },
            {
              "criteria": "cpe:2.3:a:cisco:vpn_client:5.0.07.0440:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32B0C059-A4A1-4F31-B561-F1611814004C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "evaluatorComment": "Per: http://cwe.mitre.org/data/definitions/426.html\r\n\r\n'CWE-426: Untrusted Search Path'",
  "sourceIdentifier": "psirt@cisco.com"
}