Cisco AnyConnect Posture (HostScan) Security Service CVE-2021-1366 Bypass

🗓️ 16 Jun 2021 00:00:00Reported by Core SecurityType

Cisco AnyConnect Posture (HostScan) Security Service CVE-2021-1366 Bypass. Time-of-check Time-of-use (TOCTOU) Race Condition allows local privilege elevation and code execution in AnyConnect Posture. New version 4.10.01075 released by Cisco

Reporter	Title	Published	Views	Family All 29
GithubExploit	Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client	8 Sep 202309:20	–	githubexploit
BDU FSTEC	The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client cryptographic security tool for Windows allows a hacker to execute arbitrary code.	2 Mar 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the DLL loading mechanism used by Cisco AnyConnect Secure Mobility Client for Windows allows a malicious actor to execute arbitrary code with SYSTEM privileges.	18 Jun 202100:00	–	bdu_fstec
Circl	CVE-2021-1366	17 Feb 202120:49	–	circl
Cisco	Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability	17 Feb 202116:00	–	cisco
Cisco	Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability	16 Jun 202116:00	–	cisco
Tenable Nessus	Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability (cisco-sa-anyconnect-dll-hijac-JrcTOQMC)	18 Feb 202100:00	–	nessus
Tenable Nessus	Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability (cisco-sa-anyconnect-pos-dll-ff8j6dFv)	16 Jun 202100:00	–	nessus
CNNVD	Cisco Anyconnect Secure Mobility Client Code Issue Vulnerability	17 Feb 202100:00	–	cnnvd
CNNVD	Cisco AnyConnect Secure Mobility Client for Windows 代码问题漏洞	16 Jun 202100:00	–	cnnvd