CVE-2021-1430: Creation of Temporary File With Insecure Permissions

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

CVE-2021-1426: Creation of Temporary File With Insecure Permissions

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

CVE-2021-1496: Creation of Temporary File With Insecure Permissions

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

CVE-2021-1519: Improper Input Validation

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to overwrite VPN profiles on an affected device. The vulnerability is due to insufficient validation of user-supplied input. An attacker...

CVE-2021-1429: Creation of Temporary File With Insecure Permissions

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

CVE-2021-1428: Creation of Temporary File With Insecure Permissions

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

PT-2021-2967

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description The issue is related to the creation of temporary files with insecure permissions during the uninstallation process of Cisco AnyConnect Secure...

PT-2021-3259

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client Software affected versions not specified Description A vulnerability in the interprocess communication IPC channel could allow an authenticated, local attacker to overwrite VPN profiles on an affected...

PT-2021-2964

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description The issue is related to multiple vulnerabilities in the install, uninstall, and upgrade processes of the software. These vulnerabilities could allo...

PT-2021-2974

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description The issue is related to multiple vulnerabilities in the install, uninstall, and upgrade processes of the software. These vulnerabilities could allo...

PT-2021-2979

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description The issue is related to the creation of temporary files with insecure permissions during the update process of Cisco AnyConnect Secure Mobility...

PT-2021-2980

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description The issue is related to multiple vulnerabilities in the install, uninstall, and upgrade processes of the software. These vulnerabilities could allo...

PT-2021-2978

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description The issue concerns multiple vulnerabilities in the install, uninstall, and upgrade processes of the software. These vulnerabilities could allow an...

Vulnerability fixed in Cisco AnyConnect Secure Mobility Client

A vulnerability in the IPC channel of Cisco AnyConnect Secure Mobility Client, an authenticated, local attacker can cause a Denial-of-Service DoS exploit on an affected device. To exploit this security vulnerability, the attacker must have have valid login credentials on the device. Cisco has...

CVE-2021-1450

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials ...

CVE-2021-1450

The CVE-2021-1450 issue affects Cisco AnyConnect Secure Mobility Client. A vulnerability in the IPC channel allows an authenticated, local attacker to cause a DoS on an affected device by sending crafted IPC messages to the AnyConnect process. The root cause is insufficient validation of user-sup...

Cisco AnyConnect Secure Mobility Client Denial of Service Vulnerability

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials ...

PT-2021-2147

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client affected versions not specified Description A vulnerability in the interprocess communication IPC channel could allow an authenticated, local attacker to cause a denial of service DoS condition on an...

CVE-2021-1450: Improper Input Validation

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials ...

CVE-2021-1366: Improper Verification of Cryptographic Signature

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture HostScan Module is installed on the AnyConnect client. This...