CVE-2011-2041

Published: Jun 2, 2011Modified: Apr 29, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556.

Affected (10)

Products: Cisco: Anyconnect Secure Mobility Client

Cisco

1 product

Anyconnect Secure Mobility Client

Configuration A

10 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Cisco Anyconnect Secure Mobility Client	Up to 2.3.2016
Cisco Anyconnect Secure Mobility Client	Version 2.0
Cisco Anyconnect Secure Mobility Client	Version 2.1
Cisco Anyconnect Secure Mobility Client	Version 2.2.128
Cisco Anyconnect Secure Mobility Client	Version 2.2.133
Cisco Anyconnect Secure Mobility Client	Version 2.2.136
Cisco Anyconnect Secure Mobility Client	Version 2.2.140
Cisco Anyconnect Secure Mobility Client	Version 2.2
Cisco Anyconnect Secure Mobility Client	Version 2.3.185
Cisco Anyconnect Secure Mobility Client	Version 2.3