target entity

AnyConnect Secure

2 source-linked records in the current knowledge graph.

Oct 24, 2022high

CVE-2020-3433: Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges. Required action: Apply updates per vendor instructions.

CVE-2020-3433EPSS 10.0%AnyConnect SecureCisco

CISA KEV ↗ · unattributed attribution

Oct 24, 2022high

CVE-2020-3153: Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks. Required action: Apply updates per vendor instructions.

CVE-2020-3153EPSS 28.3%AnyConnect SecureCisco

CISA KEV ↗ · unattributed attribution