Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability

A vulnerability in the interprocess communication IPC channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewall Posture Engine, formerly HostScan, is installed on Cisco Secure Client. This...

PT-2025-9842 · Cisco · Cisco Secure Client For Windows

Name of the Vulnerable Software and Affected Versions: Cisco Secure Client versions 4.9.00086 through 5.1.8.104 Description: A vulnerability exists in the interprocess communication IPC channel of Cisco Secure Client for Windows. This flaw could allow a locally authenticated attacker to perform a...

Cisco Secure Client 数据伪造问题漏洞

Cisco Secure Client is a software for connecting to virtual private networks from the American company Cisco Cisco. Cisco Secure Client has a data forgery issue vulnerability that stems from insufficient runtime resource validation, which can be exploited by an attacker to cause a DLL hijacking...

CVE-2024-20337

A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remote attacker to conduct a carriage return line feed CRLF injection attack against a user. This vulnerability is due to insufficient validation of user-supplied input. An attacker could...

CVE-2024-20338

A vulnerability in the ISE Posture System Scan module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to the use of an uncontrolled search path element. An attacker could exploit this vulnerabilit...

The vulnerability of the Internet Key Exchange version 2 module in the Cisco Secure Client security solution (formerly known as Cisco AnyConnect Secure Mobility Client) allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange version 2 module in the Cisco Secure Client security solution formerly known as Cisco AnyConnect Secure Mobility Client is related to a integer overflow. Exploiting this vulnerability could allow an attacker to cause service interruptions...

CVE-2024-20474

A vulnerability in Internet Key Exchange version 2 IKEv2 processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service DoS of Cisco Secure Client. This vulnerability is due to an integer underflow condition. An attacker could exploit this...

CVE-2024-20474

CVE-2024-20474 is a Cisco Secure Client (formerly AnyConnect) vulnerability where the IKEv2 processing contains an integer underflow, allowing an unauthenticated remote attacker to crash the client and cause a DoS. A crafted IKEv2 packet can exploit the flaw on affected systems. Affected releases...

CVE-2024-20474

A vulnerability in Internet Key Exchange version 2 IKEv2 processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service DoS of Cisco Secure Client. This vulnerability is due to an integer underflow condition. An attacker could exploit this...

PT-2024-7460 · Cisco · Cisco Secure Client

Name of the Vulnerable Software and Affected Versions: Cisco Secure Client Software versions 4.10 and earlier Description: The issue is related to an integer underflow condition in the Internet Key Exchange version 2 IKEv2 processing of Cisco Secure Client Software. This could allow an...

Cisco Secure Client 安全漏洞

Cisco Secure Client is a software for connecting to virtual private networks from Cisco USA. A security vulnerability exists in Cisco Secure Client that stems from the presence of an integer underflow problem. An attacker could exploit the vulnerability to cause a denial of service on the system...

Exploit for Uncontrolled Search Path Element in Cisco Secure_Client

CVE-2024-20338 advisoryhttps://sec.cloudapps.cisco.com/sec...

CVE-2024-20391

A vulnerability in the Network Access Manager NAM module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit...

CVE-2024-20391

A vulnerability in the Network Access Manager NAM module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit...

CVE-2024-20391

CVE-2024-20391 concerns the Cisco Secure Client’s Network Access Manager (NAM) module. The issue arises from a lack of authentication on a specific function, allowing an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM and execute arbitrary code ...

CVE-2024-20391

A vulnerability in the Network Access Manager NAM module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit...

CVE-2024-20391

A vulnerability in the Network Access Manager NAM module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit...

PT-2024-18657 · Cisco · Cisco Secure Client

Name of the Vulnerable Software and Affected Versions: Cisco Secure Client affected versions not specified Description: A lack of authentication on a specific function in the Network Access Manager NAM module could allow an unauthenticated attacker with physical access to an affected device to...

Cisco Secure Client 安全漏洞

Cisco Secure Client is a software used to connect to virtual private networks from Cisco USA. A security vulnerability exists in Cisco Secure Client that stems from a lack of authentication for specific functions, allowing an unauthenticated attacker to gain physical access to an affected device...

The vulnerability of the ISE Posture (System Scan) module of the Cisco Secure Client (formerly Cisco AnyConnect Secure Mobility Client) security solution allows attackers to enhance their privileges.

The vulnerability of the ISE Posture System Scan module of the Cisco Secure Client formerly Cisco AnyConnect Secure Mobility Client security solution is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to increase their privileges...