Does CSCvb68043 affect AnyConnect 4.2?

[John Glenn]

Is AnyConnect 4.2 affected by this vulnerability, or just old 4.3 and 4.4 installations?

[Rahul Govindan · Accepted solution]

Every release before the first fixed 4.3 and 4.4 release should be affected. So this would include all 4.2 releases also. This is documented in the security advisory given here:

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-anyconnect1

You should also consider the newly released Anyconnect vulnerability to upgrade to a fixed release:

CSCvb68043