CVE-2020-3153

🗓️ 19 Feb 2020 19:15:53Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 1475 Views🌐 WEB

A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows allows authenticated local attacker to copy files to system directory

Reporter	Title	Published	Views	Family All 34
0daydb	LanSpy 2.0.1.159 - Stack Buffer Overflow	27 Jun 202001:06	–	0daydb
0daydb	Cisco AnyConnect CVE-2020-3153 - Privilege Escalation	27 Jun 202001:09	–	0daydb
0daydb	ASUS Aura Sync 1.07.71 CVE-2019-17603 - Privilege Escalation	27 Jun 202001:10	–	0daydb
0day.today	Cisco AnyConnect Secure Mobility Client 4.8.01090 Privilege Escalation Vulnerability	23 Apr 202000:00	–	zdt
0day.today	Cisco AnyConnect Path Traversal / Privilege Escalation Exploit	26 Jun 202000:00	–	zdt
0day.today	Cisco AnyConnect Privilege Escalation Exploit	1 Oct 202000:00	–	zdt
GithubExploit	Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client	15 May 202011:40	–	githubexploit
GithubExploit	Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client	25 Sep 202020:53	–	githubexploit
GithubExploit	Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client	4 May 202018:36	–	githubexploit
GithubExploit	Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client	19 May 202018:59	–	githubexploit

NVD

Node

cisco anyconnect_secure_mobility_clientRange<4.8.02042windows

[
  {
    "product": "Cisco AnyConnect Secure Mobility Client",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/fulldisclosure/2020/Apr/43
packetstormsecurity	www.packetstormsecurity.com/files/159420/Cisco-AnyConnect-Privilege-Escalation.html
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ac-win-path-traverse-qO4HWBsj
packetstormsecurity	www.packetstormsecurity.com/files/157340/Cisco-AnyConnect-Secure-Mobility-Client-4.8.01090-Privilege-Escalation.html
packetstormsecurity	www.packetstormsecurity.com/files/158219/Cisco-AnyConnect-Path-Traversal-Privilege-Escalation.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
cac_cmd	binary	127.0.0.1:62522	Local privilege escalation via Cisco AnyConnect installer through crafted IPC to the agent on localhost, enabling copying of files to system locations and DLL hijacking.	CWE-427
installation_path	binary	127.0.0.1:62522	Local privilege escalation via Cisco AnyConnect installer through crafted IPC to the agent on localhost, enabling copying of files to system locations and DLL hijacking.	CWE-427
vpndownloader.exe	binary	127.0.0.1:62522	Local privilege escalation via Cisco AnyConnect installer through crafted IPC to the agent on localhost, enabling copying of files to system locations and DLL hijacking.	CWE-427
dbghelp.dll	binary	127.0.0.1:62522	Local privilege escalation via Cisco AnyConnect installer through crafted IPC to the agent on localhost, enabling copying of files to system locations and DLL hijacking.	CWE-427
IPC payload	binary	127.0.0.1:62522	Local privilege escalation via Cisco AnyConnect installer through crafted IPC to the agent on localhost, enabling copying of files to system locations and DLL hijacking.	CWE-427

28 Oct 2025 13:57Current

6.6Medium risk

Vulners AI Score6.6

CVSS 24.9

CVSS 3.16.5

CVSS 36.5

EPSS0.25087

SSVC