rewindex

RewindexCVEs

CVE-2020-3153: Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

Medium · CVSS 6.5 (CVSS 3.1)KEV known exploitedEPSS 28.3%, 98th percentilePublished Updated Assigner: cisco

In CISA’s Known Exploited Vulnerabilities catalog: Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability.

Added , federal remediation due . Known ransomware use: Known.

Required action: Apply updates per vendor instructions.

Description

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks. To exploit this vulnerability, the attacker needs valid credentials on the Windows system.

Vector CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N · CWE-427

Status incidents that name it

No tracked status incident names this CVE.

Affected vendors and products

Cisco: Cisco AnyConnect Secure Mobility Client

References

All CVEsMarkdownJSON