CVE-2020-3153

🗓️ 19 Feb 2020 19:15:53Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1535 Views🌐 WEB

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows allows authenticated local attacker to copy files to system directory

Reporter	Title	Published	Views	Family All 39
0daydb	LanSpy 2.0.1.159 - Stack Buffer Overflow	27 Jun 202001:06	–	0daydb
0daydb	Cisco AnyConnect CVE-2020-3153 - Privilege Escalation	27 Jun 202001:09	–	0daydb
0daydb	ASUS Aura Sync 1.07.71 CVE-2019-17603 - Privilege Escalation	27 Jun 202001:10	–	0daydb
zdt	Cisco AnyConnect Secure Mobility Client 4.8.01090 Privilege Escalation Vulnerability	23 Apr 202000:00	–	zdt
zdt	Cisco AnyConnect Path Traversal / Privilege Escalation Exploit	26 Jun 202000:00	–	zdt
zdt	Cisco AnyConnect Privilege Escalation Exploit	1 Oct 202000:00	–	zdt
GithubExploit	Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client	15 May 202011:40	–	githubexploit
GithubExploit	Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client	25 Sep 202020:53	–	githubexploit
GithubExploit	Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client	4 May 202018:36	–	githubexploit
GithubExploit	Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client	19 May 202018:59	–	githubexploit

NVD

Node

cisco anyconnect_secure_mobility_clientRange<4.8.02042windows

[
  {
    "product": "Cisco AnyConnect Secure Mobility Client",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/158219/Cisco-AnyConnect-Path-Traversal-Privilege-Escalation.html
packetstormsecurity	www.packetstormsecurity.com/files/159420/Cisco-AnyConnect-Privilege-Escalation.html
packetstormsecurity	www.packetstormsecurity.com/files/157340/Cisco-AnyConnect-Secure-Mobility-Client-4.8.01090-Privilege-Escalation.html
seclists	www.seclists.org/fulldisclosure/2020/Apr/43
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ac-win-path-traverse-qO4HWBsj
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
cac_cmd	request body	127.0.0.1:62522	Path traversal via Cisco AnyConnect installer IPC to the loopback port 62522 enables copying binaries to arbitrary locations with system privileges and potential DLL hijacking.	CWE-427
dbghelp.dll	path	C:\ProgramData\Cisco\dbghelp.dll	Potential DLL hijacking by placing a malicious dbghelp.dll at the location used by the vulnerable installer component, enabling code execution with system privileges.	CWE-427
vpndownloader.exe	path	C:\ProgramData\Cisco\vpndownloader.exe	Installer copies vpndownloader.exe to a system location via path traversal, enabling privilege escalation.	CWE-427

12 Aug 2026 05:17Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.9

CVSS 3.16.5

CVSS 36.5

EPSS0.28307

SSVC