Cisco has made proof-of-concept attack code publicly available to fix a six-month-old zero-day vulnerability discovered in Cisco AnyConnect Secure Mobility Client VPN software.
These new versions also have additional settings in the local policies that allow you to selectively allow or limit scripts, assistance, services, or language updates, which is highly recommended for improved protection.