Threat Level: green Handler on Duty: Johannes Ullrich

SANS ISC: InfoSec Handlers Diary Blog InfoSec Handlers Diary Blog

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Microsoft February Patch Failures Continue: KB3023607 vs. Cisco AnyConnect Client

Published: 2015-02-13
Last Updated: 2015-02-13 17:32:03 UTC
by Johannes Ullrich (Version: 1)
1 comment(s)

Another patch released by Microsoft this month is causing problems. This time it is KB3023607,which was supposed to mitigate the POODLE vulnerability. Once applied, Cisco AnyConnect users are no longer able to connect to their VPN.

For more details, also see the Cisco bug report (requires login).

The issue appears to affect Windows 8.1, in which case running the application (vpnui.exe) in Windows 8 compatibility mode will fix the problem for now.


Johannes B. Ullrich, Ph.D.

1 comment(s)
ISC StormCast for Friday, February 13th 2015
Diary Archives