Cisco AnyConnect Posture (HostScan) Security Service Multiple Vulnerabilities

🗓️ 17 Feb 2021 00:00:00Reported by Core SecurityType

Cisco AnyConnect Posture (HostScan) Security Service Vulnerabilities. Allows local user privilege escalation and code execution. AnyConnect 4.9.01095 for Windows affected. Solution: Update to AnyConnect 4.9.05042

Reporter	Title	Published	Views	Family All 14
GithubExploit	Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client	8 Sep 202309:20	–	githubexploit
Circl	CVE-2021-1366	17 Feb 202120:49	–	circl
Cisco	Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability	17 Feb 202116:00	–	cisco
Tenable Nessus	Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability (cisco-sa-anyconnect-dll-hijac-JrcTOQMC)	18 Feb 202100:00	–	nessus
CNNVD	Cisco Anyconnect Secure Mobility Client Code Issue Vulnerability	17 Feb 202100:00	–	cnnvd
Core Security	Cisco AnyConnect Posture (HostScan) Security Service CVE-2021-1366 Bypass	16 Jun 202100:00	–	coresecurity
CVE	CVE-2021-1366	17 Feb 202116:55	–	cve
Cvelist	CVE-2021-1366 Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability	17 Feb 202116:55	–	cvelist
EUVD	EUVD-2021-6833	3 Oct 202520:07	–	euvd
NCSC	Vulnerability fixed in Cisco Anyconnect Client	18 Feb 202100:00	–	ncsc