VULNERABILITY INTELLIGENCE
CVE-2013-1173
CVSS score6.6 MEDIUM
EPSS probability0.29%
CISA KEVNot currently listed
Published2013-04-11
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:S/C:C/I:C/A:C
Description
Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- psirt@cisco.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory