CVE-2020-3556

CVE-2020-3556 affects Cisco AnyConnect Secure Mobility Client (Windows/macOS/Linux). The IPC listener lacks authentication, allowing a local, authenticated attacker to send crafted IPC messages to cause the targeted user to execute a script with the user’s privileges. Exploitation requires an ong...

Cisco Zero-Day in AnyConnect Secure Mobility Client Remains Unpatched

Cisco has disclosed a zero-day vulnerability – for which there is not yet a patch – in the Windows, macOS and Linux versions of its AnyConnect Secure Mobility Client Software. While Cisco said it is not aware of any exploits in the wild for the vulnerability, it said Proof-of-Concept PoC exploit...

CVE-2020-3556

creationtimestamp| type| source ---|---|--- 2020-11-05 12:29:22+00:00| published-proof-of-concept| https://t.me/informationsecuritychannel/41467 2020-11-06 22:51:34+00:00| seen| https://t.me/cibsecurity/16014 2024-11-14 06:07:10+00:00| seen| MISP/dd7cd495-cd76-48fb-9aee-acfbf13a78cb...