CVE-2012-4655
Estado: ModificadaAlta (9.3)—
The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 9.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 4.64%
- Percentil entre todas las CVEs puntuadas: 91
- Fecha de la puntuación: 3/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-20
Referencias
- http://secunia.com/advisories/50669
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac
- http://www.securityfocus.com/bid/55606
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78677
- http://secunia.com/advisories/50669
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac
- http://www.securityfocus.com/bid/55606
- https://exchange.xforce.ibmcloud.com/vulnerabilities/78677
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-4655",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 9.3,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-09-24T17:55:07.157",
"references": [
{
"url": "http://secunia.com/advisories/50669",
"source": "psirt@cisco.com"
},
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securityfocus.com/bid/55606",
"source": "psirt@cisco.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78677",
"source": "psirt@cisco.com"
},
{
"url": "http://secunia.com/advisories/50669",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120620-ac",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/55606",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/78677",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The WebLaunch feature in Cisco Secure Desktop before 3.6.6020 does not properly validate binaries that are received by the downloader process, which allows remote attackers to execute arbitrary code via vectors involving (1) ActiveX or (2) Java components, aka Bug IDs CSCtz76128 and CSCtz78204."
},
{
"lang": "es",
"value": "La funcionalidad WebLaunch en Cisco Secure Desktop antes de v3.6.6020 no valida adecuadamente los binarios recibidos por el proceso de descarga, lo que permite a cualquier atacante ejecutar código de su elección a través de vectores relacionados con (1) ActiveX o (2) componentes Java. El problema esta identificado con los Bug IDs CSCtz76128 y CSCtz78204."
}
],
"lastModified": "2026-06-16T23:45:31.597",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EE6B79A-FD31-4637-BE22-EEADF63B94FF"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F2F8EA5-8DEF-48D0-9E7F-6047D4AECC5C"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.1.1.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59D841B0-3D1B-4F1C-87F1-D0355955E49C"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.1.1.33:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F13E414E-E56E-496E-A952-F93DCF1B1BDC"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.1.1.45:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21F5DFB0-21F4-45F7-B4AF-000B24DEA596"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D7A8878-2E0F-4140-86DF-75999B47E4F5"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4932BA9E-4156-4445-93E9-7A9F1D81090B"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3497EB29-C406-44C1-AB28-0DDC4E79A9D9"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C63D54D-6424-4767-9832-41E7F0B1D1E9"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4D4CF6F-2F81-45B0-9B5B-C8D79E74D6F4"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AA0286A4-6011-41DF-B607-44CFBBFD437F"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.4.2048:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FE277431-4101-4C0F-91DB-A1C15C0344FF"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4142FB07-D5F0-4209-B0DE-67B768D7BDAC"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.5.841:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85641AF5-7A5B-4146-9806-E055420DB3AD"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.5.1077:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7D5FC538-64F7-4F3D-9FAE-82D5015737DE"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.5.2001:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F72D901-C62C-41A0-8D68-72CB9508E507"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.5.2008:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D79AB614-C5B3-4116-B957-A42F6AD0DD6F"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9273F0F3-38F2-45AE-8453-1004A7CE91EC"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.181:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1A4F9A8-DB02-45A0-ABE4-08683C798CC3"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.185:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71AF8E5A-42C5-42CB-8890-6F00BC1C471A"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.1001:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CA7E7CD-E877-4868-B868-AF77F931F593"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.2002:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93F2063D-7955-4217-A13D-217ED25C5DAE"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.3002:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA30F821-2963-4431-B25F-BB061CBCBE27"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.4021:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "689D7A99-1CB3-4930-8A0B-466DDC718D6D"
},
{
"criteria": "cpe:2.3:a:cisco:secure_desktop:3.6.5005:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D9C94C7-3E8A-4E3A-A88F-648F755D3C3A"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}