Exploit for Uncontrolled Search Path Element in Cisco Anyconnect_Secure_Mobility_Client

🗓️ 08 Sep 2023 09:20:20Reported by koztkoztType

Vulnerability in Cisco AnyConnect Secure Mobility Client allows local privilege escalation through DLL hijacking in the HostScan module

Reporter	Title	Published	Views	Family All 16
BDU FSTEC	The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client cryptographic security tool for Windows allows a hacker to execute arbitrary code.	2 Mar 202100:00	–	bdu_fstec
Circl	CVE-2021-1366	17 Feb 202120:49	–	circl
Cisco	Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability	17 Feb 202116:00	–	cisco
Tenable Nessus	Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability (cisco-sa-anyconnect-dll-hijac-JrcTOQMC)	18 Feb 202100:00	–	nessus
CNNVD	Cisco Anyconnect Secure Mobility Client Code Issue Vulnerability	17 Feb 202100:00	–	cnnvd
Core Security	Cisco AnyConnect Posture (HostScan) Security Service Multiple Vulnerabilities	17 Feb 202100:00	–	coresecurity
Core Security	Cisco AnyConnect Posture (HostScan) Security Service CVE-2021-1366 Bypass	16 Jun 202100:00	–	coresecurity
CVE	CVE-2021-1366	17 Feb 202116:55	–	cve
Cvelist	CVE-2021-1366 Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability	17 Feb 202116:55	–	cvelist
EUVD	EUVD-2021-6833	3 Oct 202520:07	–	euvd

08 Sep 2023 09:45Current

7.7High risk

Vulners AI Score7.7

CVSS 26.9

CVSS 3.17.8

EPSS0.01253

SSVC