CVE-2015-4211

CVE-2015-4211 describes a local privilege escalation vulnerability affecting Cisco AnyConnect Secure Mobility Client 3.1(60) on Windows, stemming from improper pathname validation. An attacker could exploit this by crafting a malicious INF file, leading to complete compromise of confidentiality, integrity, and availability on the affected system. While rated with a CVSS score of 7.2 (high severity), there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.