PT-2021-3319 · Cisco · Cisco Anyconnect Secure Mobility Client For Windows

Name of the Vulnerable Software and Affected Versions: Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description: A vulnerability in the DLL loading mechanism could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device...

CVE-2021-1519

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to overwrite VPN profiles on an affected device. The vulnerability is due to insufficient validation of user-supplied input. An attacker...

IPCDump - Tool For Tracing Interprocess Communication (IPC) On Linux

Announcement post ipcdump is a tool for tracing interprocess communication IPC on Linux. It covers most of the common IPC mechanisms -- pipes, fifos, signals, unix sockets, loopback-based networking, and pseudoterminals. It's a useful tool for debugging multi-process applications, and it's also a...

The vulnerability of the XPC service in Kaspersky Internet Security’s antivirus protection software for MacOS systems allows a hacker to disable the antivirus protection.

The vulnerability of Kaspersky Internet Security’s XPC service for the MacOS operating system is related to errors in the authentication process. Exploiting this vulnerability could allow a hacker to disable the antivirus protection...

The vulnerability of the implementation of the Google Chrome browser’s IPC technology allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s IPC implementation relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

CVE-2021-1450

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials ...

CVE-2021-1450

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials ...

CVE-2021-1366

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect client. This...

Qualcomm IPC Input Validation Error Vulnerability

Qualcomm IPC is a Qualcomm Incorporated USA support component used in chips. A security vulnerability exists in Qualcomm IPC that stems from a lack of checking the validity and boundary compliance of parameters read from shared memory...

pacemaker: ACL restrictions bypass

An ACL bypass flaw was found in Pacemaker. This flaw allows an attacker with a local account on the cluster and in the haclient group to use IPC communication with various daemons to directly perform certain tasks that would be prevented if they had gone through configured ACLs. The highest threa...

Apple macOS elevation of privilege vulnerability (CNVD-2020-70954)

Apple macOS is a specialized operating system developed by Apple for Mac computers. An elevation of privilege vulnerability exists in Apple macOS version 6.0.2. The vulnerability stems from a flaw in the XPC interface in AnyDesk on macOS versions 6.0.2 and above, which fails to properly validate ...

CVE-2020-27614

AnyDesk for macOS versions 6.0.2 and older have a vulnerability in the XPC interface that does not properly validate client requests and allows local privilege escalation...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. An elevation of privilege vulnerability exists in Apple macOS version 6.0.2. The vulnerability stems from a flaw in the XPC interface in AnyDesk on macOS versions 6.0.2 and above, which fails to properly validate ...

The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client encryption protection tool allows a intruder to disclose the protected information.

The vulnerability of the process-interaction channel of the Cisco AnyConnect Secure Mobility Client cryptographic security device is related to the open IPC function. Exploiting this vulnerability can allow a attacker to disclose the protected information...

USN-4623-1 pacemaker vulnerability

Ken Gaillot discovered that Pacemaker incorrectly handled IPC communications permissions. A local attacker could possibly use this issue to bypass ACL restrictions and execute arbitrary code as root...

CVE-2020-3556

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to cause a targeted AnyConnect user to execute a malicious script. The vulnerability is due to a lack of authentication to the IPC listene...

CVE-2020-27123

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to read arbitrary files on the underlying operating system of an affected device. The vulnerability is due to an exposed IPC function. ...

CVE-2020-27123

CVE-2020-27123 affects Cisco AnyConnect Secure Mobility Client for Windows. A vulnerability in the Interprocess Communication (IPC) channel, due to an exposed IPC function, lets an authenticated, local attacker craft an IPC message to the AnyConnect process to read arbitrary files on the underlyi...

Cisco AnyConnect Secure Mobility Client for Windows Arbitrary File Read Vulnerability

Cisco AnyConnect Secure Mobility Client for Windows is a Windows-based secure mobility client from Cisco that provides secure access to networks and applications from any device. An arbitrary file read vulnerability exists in the Interprocess Communication IPC channel of Cisco AnyConnect Secure...

CVE-2020-27123

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to read arbitrary files on the underlying operating system of an affected device. The vulnerability is due to an exposed IPC function. ...