CVE:CVE-2016-6369
CNNVD:CNNVD-201608-451
Cisco AnyConnect Secure Mobility Client是美国思科（Cisco）公司的一款可通过任何设备安全访问网络和应用的安全移动客户端。
Cisco AnyConnect Secure Mobility Client 4.2.05015之前的版本和4.3.02039之前的4.3.x版本中存在本地提权漏洞，该漏洞源于程序没有正确处理路径名。本地攻击者可借助特制的INF文件利用该漏洞获取SYSTEM权限。
solution:Upgrade cisco anyconnect_secure_mobility_client to a higher version than 2.0.0343,2.1.0148,2.2.0133,2.2.0136,2.2.0140,2.3.0185,2.3.0254,2.3.1003,2.3.2016,2.4.0202,2.4.1012,2.5.0217,2.5.2006,2.5.2010,2.5.2011,2.5.2014,2.5.2017,2.5.2018,2.5.2019,2.5.3041,2.5.3046,2.5.3051,2.5.3054,2.5.3055,2.5_base,3.0.0,3.0.0629,3.0.1047,3.0.2052,3.0.3050,3.0.3054,3.0.4235,3.0.5075,3.0.5080,3.0.09231,3.0.09266,3.0.09353,3.1(60,3.1.0,3.1.02043,3.1.05182,3.1.05187,3.1.06073,3.1.07021,4.0(48,4.0(64,4.0(2049,4.0.0,4.0.00048,4.0.00051,4.1(8,4.1.0,4.2.0,4.2.04039,4.3.0,4.3.00748,4.3.01095,and avoid the version 2.0.0343,2.1.0148,2.2.0133,2.2.0136,2.2.0140,2.3.0185,2.3.0254,2.3.1003,2.3.2016,2.4.0202,2.4.1012,2.5.0217,2.5.2006,2.5.2010,2.5.2011,2.5.2014,2.5.2017,2.5.2018,2.5.2019,2.5.3041,2.5.3046,2.5.3051,2.5.3054,2.5.3055,2.5_base,3.0.0,3.0.0629,3.0.1047,3.0.2052,3.0.3050,3.0.3054,3.0.4235,3.0.5075,3.0.5080,3.0.09231,3.0.09266,3.0.09353,3.1(60),3.1.0,3.1.02043,3.1.05182,3.1.05187,3.1.06073,3.1.07021,4.0(48),4.0(64),4.0(2049),4.0.0,4.0.00048,4.0.00051,4.1(8),4.1.0,4.2.0,4.2.04039,4.3.0,4.3.00748,4.3.01095