ByteOS Network

NVD Vulnerability Details :

CVE-2011-2041

Modified

Source-psirt@cisco.com

Published At-02 Jun, 2011 | 20:55

Updated At-29 Apr, 2026 | 01:13

The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 7.2

Base severity: HIGH

Vector:

AV:L/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Cisco Systems, Inc.

>>anyconnect_secure_mobility_client>>Versions up to 2.3.2016(inclusive)

cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>anyconnect_secure_mobility_client>>2.0

cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.0:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>anyconnect_secure_mobility_client>>2.1

cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.1:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>anyconnect_secure_mobility_client>>2.2

cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>anyconnect_secure_mobility_client>>2.2.128

cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.128:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>anyconnect_secure_mobility_client>>2.2.133

cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.133:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>anyconnect_secure_mobility_client>>2.2.136

cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.136:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>anyconnect_secure_mobility_client>>2.2.140

cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.2.140:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>anyconnect_secure_mobility_client>>2.3

cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.3:*:*:*:*:*:*:*

Cisco Systems, Inc.

>>anyconnect_secure_mobility_client>>2.3.185

cpe:2.3:a:cisco:anyconnect_secure_mobility_client:2.3.185:*:*:*:*:*:*:*

Microsoft Corporation

>>windows>>*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Microsoft Corporation

>>windows_mobile>>*

cpe:2.3:o:microsoft:windows_mobile:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

CWE ID: CWE-264

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://osvdb.org/72716	psirt@cisco.com	N/A
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml	psirt@cisco.com	Vendor Advisory
http://www.securityfocus.com/bid/48077	psirt@cisco.com	N/A
http://www.securitytracker.com/id?1025591	psirt@cisco.com	N/A
http://osvdb.org/72716	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b80123.shtml	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://www.securityfocus.com/bid/48077	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securitytracker.com/id?1025591	af854a3a-2127-422b-91ae-364da2661108	N/A