Cisco AnyConnect Posture (HostScan) Security Service CVE-2021-1366 Bypass

🗓️ 16 Jun 2021 00:00:00Reported by Core SecurityType

Cisco AnyConnect Posture (HostScan) Security Service CVE-2021-1366 Bypass. Time-of-check Time-of-use (TOCTOU) Race Condition allows local privilege elevation and code execution in AnyConnect Posture. New version 4.10.01075 released by Cisco

Reporter	Title	Published	Views	Family All 26
GithubExploit	Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client	8 Sep 202309:20	–	githubexploit
Circl	CVE-2021-1366	17 Feb 202120:49	–	circl
Cisco	Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability	17 Feb 202116:00	–	cisco
Cisco	Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability	16 Jun 202116:00	–	cisco
Tenable Nessus	Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability (cisco-sa-anyconnect-dll-hijac-JrcTOQMC)	18 Feb 202100:00	–	nessus
Tenable Nessus	Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability (cisco-sa-anyconnect-pos-dll-ff8j6dFv)	16 Jun 202100:00	–	nessus
CNNVD	Cisco Anyconnect Secure Mobility Client Code Issue Vulnerability	17 Feb 202100:00	–	cnnvd
CNNVD	Cisco AnyConnect Secure Mobility Client for Windows 代码问题漏洞	16 Jun 202100:00	–	cnnvd
Core Security	Cisco AnyConnect Posture (HostScan) Security Service Multiple Vulnerabilities	17 Feb 202100:00	–	coresecurity
CVE	CVE-2021-1366	17 Feb 202116:55	–	cve