VULNERABILITY INTELLIGENCE

CVE-2015-7600

CVSS score7.2 HIGH

EPSS probability0.54%

CISA KEVNot currently listed

Published2015-10-06

Last modified2026-06-17

CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section.

Primary references

cve@mitre.org — Third Party Advisory, VDB Entry
cve@mitre.org — Exploit
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Exploit