cvedb.io
CVE-2016-9192
HIGH · CVSS 7.8
EPSS exploitation probability: 0%
Published 2016-12-14T00:59:15.223 · Last modified 2026-06-17T00:55:39.490

Summary

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected Releases: 4.3(2039) 4.3(748). Known Fixed Releases: 4.3(4019) 4.4(225).

Affected products

cisco — anyconnect_secure_mobility_client

Does this affect you?

Add your gear to cvedb and we'll alert you only when cisco ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.