Lucene search
+L

1058 matches found

Tenable Nessus
Tenable Nessus
added 2021/04/15 12:00 a.m.149 views

Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution (cisco-sa-anyconnect-ipc-KfQO9QhK)

According to its self-reported version, Cisco AnyConnect Secure Mobility Client is affected by a arbitrary code execution vulnerability. The vulnerability is due to a lack of authentication to the IPC listener. An authenticated, local attacker could exploit this vulnerability by sending crafted I...

7.3CVSS7.6AI score0.00449EPSS
SaveExploits0References3
NCSC
NCSC
added 2021/04/15 12:00 a.m.10 views

Vulnerability fixed in Cisco AnyConnect Secure Mobility Client

A vulnerability in the IPC channel of Cisco AnyConnect Secure Mobility Client, an authenticated, local attacker can cause a Denial-of-Service DoS exploit on an affected device. To exploit this security vulnerability, the attacker must have have valid login credentials on the device. Cisco has...

5.5CVSS6.7AI score0.00231EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2021/04/13 12:00 a.m.43 views

MacOS: Cisco AnyConnect Secure Mobility Client DoS (cisco-sa-anyconnect-dos-55AYyxYr)

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials ...

5.5CVSS5.8AI score0.00231EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/04/13 12:00 a.m.40 views

Cisco AnyConnect Secure Mobility Client DoS (cisco-sa-anyconnect-dos-55AYyxYr)

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials ...

5.5CVSS5.8AI score0.00231EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/04/13 12:00 a.m.35 views

Cisco AnyConnect Secure Mobility Client for Mac OS File Corruption (cisco-sa-anyconnect-mac-dos-36s2y3Lv)

According to its self-reported version, Cisco AnyConnect Secure Mobility Client is affected by a file corruption vulnerability. The vulnerability is due to the incorrect handling of directory paths. An authenticated, attacker could exploit this vulnerability by creating a symbolic link symlink to...

5.6CVSS6AI score0.00229EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:00 a.m.27 views

The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client encryption protection tool allows a intruder to trigger a service failure.

The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client cryptographic security tool is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

5.5CVSS5.9AI score0.00231EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/03/02 12:00 a.m.17 views

The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client cryptographic security tool for Windows allows a hacker to execute arbitrary code.

The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client cryptographic security tool for Windows relates to improper verification of the cryptographic signature of data. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

7.8CVSS7.5AI score0.01253EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2021/02/24 8:15 p.m.8 views

CVE-2021-1450

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials ...

5.5CVSS6.1AI score0.00231EPSS
SaveExploits0References1
NVD
NVD
added 2021/02/24 8:15 p.m.49 views

CVE-2021-1450

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials ...

5.5CVSS0.00231EPSS
SaveExploits0References1
Prion
Prion
added 2021/02/24 8:15 p.m.32 views

Input validation

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials ...

4.9CVSS5.3AI score0.00231EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/02/24 7:31 p.m.47 views

CVE-2021-1450 Cisco AnyConnect Secure Mobility Client Denial of Service Vulnerability

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials ...

5.5CVSS5.6AI score0.00231EPSS
SaveExploits0References1
CVE
CVE
added 2021/02/24 7:31 p.m.92 views

CVE-2021-1450

The CVE-2021-1450 issue affects Cisco AnyConnect Secure Mobility Client. A vulnerability in the IPC channel allows an authenticated, local attacker to cause a DoS on an affected device by sending crafted IPC messages to the AnyConnect process. The root cause is insufficient validation of user-sup...

5.5CVSS5.2AI score0.00231EPSS
SaveExploits0References1Affected Software1
Cisco
Cisco
added 2021/02/24 4:00 p.m.105 views

Cisco AnyConnect Secure Mobility Client Denial of Service Vulnerability

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials ...

5.5CVSS5.3AI score0.00231EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/02/24 4:00 p.m.7 views

CVE-2021-1450

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials ...

5.5CVSS5.9AI score0.00231EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/02/24 12:00 a.m.12 views

Cisco Anyconnect Secure Mobility Client Input Validation Error Vulnerability

Cisco Anyconnect Secure Mobility Client is a VPN client software for secure connectivity from Cisco. A security vulnerability exists in Cisco AnyConnect Secure Mobility Client, which can be exploited by an attacker to cause a denial of service on an affected device...

5.5CVSS6AI score0.00231EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2021/02/18 12:00 a.m.65 views

Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability (cisco-sa-anyconnect-dll-hijac-JrcTOQMC)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cisco-sa-anyconnect-dll-hijac-JrcTOQMC advisory. - A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure...

7.8CVSS7.9AI score0.01253EPSS
SaveExploits1References3
CISA
CISA
added 2021/02/18 12:00 a.m.48 views

Cisco Releases Security Updates for AnyConnect Secure Mobility Client

Cisco has released security updates to address a vulnerability in Cisco AnyConnect Secure Mobility Client. An attacker could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review Cisco Security Advisory...

6.7AI score
SaveExploits0References1
OSV
OSV
added 2021/02/17 5:15 p.m.8 views

CVE-2021-1366

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect client. This...

7.8CVSS7.4AI score0.01253EPSS
SaveExploits1References1
NVD
NVD
added 2021/02/17 5:15 p.m.30 views

CVE-2021-1366

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect client. This...

7.8CVSS0.01253EPSS
SaveExploits1References1
Prion
Prion
added 2021/02/17 5:15 p.m.31 views

Input validation

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect client. This...

6.9CVSS7.7AI score0.01253EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder