Cisco AnyConnect Secure Mobility Client Elevation of Privilege Vulnerability (CNVD-2021-103367)

An elevation of privilege vulnerability exists in Cisco AnyConnect Secure Mobility Client, a VPN client software for secure connections from Cisco, which results from the assignment of incorrect privileges to a script executed before a user logs in. The vulnerability is caused by assigning the wrong privileges to a script executed before a user logs in. An attacker could exploit this vulnerability to escalate privileges on the affected device.