CVE-2016-9192

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft Windows operating system SYSTEM account. More Information: CSCvb68043. Known Affected Releases: 4.3(2039) 4.3(748). Known Fixed Releases: 4.3(4019) 4.4(225).

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-264

Affected software

Vendor	Product	Versions
n/a	Cisco AnyConnect Secure Mobility Client	Cisco AnyConnect Secure Mobility Client

References

http://www.securityfocus.com/bid/94770Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037409Third Party Advisory, VDB Entry
https://github.com/nettitude/PoshC2/blob/master/Modules/CVE-2016-9192.ps1
https://github.com/serializingme/cve-2016-9192
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-anyconnect1Vendor Advisory
http://www.securityfocus.com/bid/94770Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037409Third Party Advisory, VDB Entry
https://github.com/nettitude/PoshC2/blob/master/Modules/CVE-2016-9192.ps1
https://github.com/serializingme/cve-2016-9192
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-anyconnect1Vendor Advisory

Timeline

Published: Dec 14, 2016
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-91937.5A vulnerability in the malicious file detection and blocking features of Cisco Firepower Management Center and Cisco FireSIGHT System Softwa CVE-2016-91946.5A vulnerability in 802.11 Wireless Multimedia Extensions (WME) action frame processing in Cisco Wireless LAN Controller (WLC) Software could CVE-2016-91955.3A vulnerability in RADIUS Change of Authorization (CoA) request processing in the Cisco Wireless LAN Controller (WLC) could allow an unauthe CVE-2016-91966.7A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authen CVE-2016-91976.7A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authent CVE-2016-91987.5A vulnerability in the Active Directory integration component of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote CVE-2016-91996.5A vulnerability in the Cisco application-hosting framework (CAF) of Cisco IOx could allow an authenticated, remote attacker to read arbitrar CVE-2016-92006.1A vulnerability in the web framework code of Cisco Prime Collaboration Assurance could allow an unauthenticated, remote attacker to conduct CVE-2016-92017.5A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to CVE-2016-92026.1A vulnerability in the web-based management interface of Cisco Email Security Appliance (ESA) Switches could allow an unauthenticated, remot CVE-2016-92037.5A vulnerability in the Internet Key Exchange Version 2 (IKEv2) feature of Cisco ASR 5000 Series Software could allow an unauthenticated, rem CVE-2016-92046.5A vulnerability in the Cisco Intercloud Fabric (ICF) Director could allow an unauthenticated, remote attacker to connect to internal service