Anyconnect Secure Mobility Client vulnerabilities

3 known vulnerabilities in Anyconnect Secure Mobility Client from Cisco. 2 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Cisco Secure Client: Incorrect Default Permissions

  CVE-2023-20178Jun 28, 2023CiscoEPSS 5.37%

  A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to elevate privileges to those of SYSTEM. The

• 7.8 High severity

  Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Exploited

  CVE-2020-3433Aug 17, 2020CiscoEPSS 10%

  A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to hav

• 6.5 Medium severity

  Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Exploited

  CVE-2020-3153Feb 19, 2020CiscoEPSS 28.5%

  A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the