AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2011-2678

MEDIUM · CVSS 6.8 EPSS 0.36%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2011-07-07 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2011-2678
Severity
MEDIUM
CVSS
6.8
EPSS
0.36%
Windows Cisco

Original NVD Description

The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\INTERACTIVE:F) for cvpnd.exe, which allows local users to gain privileges by replacing this executable file with an arbitrary program, aka Bug ID CSCtn50645. NOTE: this vulnerability exists because of a CVE-2007-4415 regression.