'AnyConnect Client MAC' Computer Vulnerabilities Alerting Service

The Vigilance Vulnerability Alerts team has issued a warning about a newly discovered computer vulnerability that affects users of the Cisco AnyConnect Secure Mobility Client and AnConnect VPN Client. According to the alert, an attacker with expert-level skills can exploit this vulnerability to trigger a denial-of-service (DoS) attack on affected systems.

The vulnerability, identified as CSCut12255, is classified as low severity by the Vigilance team. It affects the Cisco AnyConnect Secure Mobility Client product installed on Mac OS X systems. An attacker can manipulate memory to cause a fatal error in the Mac OS X kernel, effectively stopping the system's operations.

To protect against this threat, users are advised to install the latest software updates and patches for their affected products. Additionally, they should ensure that their systems are configured with split-include configuration (tunnel-all DNS disabled and no split-DNS) to prevent interference with native DNS resolvers.

The AnyConnect Secure Mobility Client is a popular product used by many organizations and individuals to secure remote access to networks. It is essential for users of this product to stay informed about vulnerabilities like CSCut12255 and take necessary steps to mitigate the risks.

References:

* 40176

* CSCut12255

* CVE-2015-4290

* VIGILANCE-VUL-17538

To scan your Mac for installed programs, launch PowerMyMac and choose App Uninstaller. This will help you identify any vulnerable software that may be present on your system.

By staying informed about computer vulnerabilities like CSCut12255, users can take proactive measures to protect their systems against potential threats. For more information, please visit the Cisco website or contact our Vigilance Vulnerability Alerts team for assistance.

Anyconnect client mac