Cisco AnyConnect Secure Mobility Client Input Validation Error Vulnerability

Cisco AnyConnect Secure Mobility Client for Windows is a Windows-based secure mobility client from Cisco that provides secure access to networks and applications from any device. An input validation error vulnerability exists in the interprocess communication IPC channel of Cisco AnyConnect Secur...

Information disclosure

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

Information disclosure

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

CVE-2021-1496

Cisco AnyConnect Secure Mobility Client for Windows is affected by DLL and executable hijacking vulnerabilities in the install, uninstall, and upgrade processes (CVE-2021-1496). An authenticated, local attacker with valid Windows credentials could hijack DLL or executables used by the client to e...

CVE-2021-1430

CVE-2021-1430 pertains to Cisco AnyConnect Secure Mobility Client for Windows. The documented issue is DLL and executable hijacking during install, uninstall, and upgrade processes, allowing an authenticated local attacker to hijack files used by the application and potentially execute arbitrary ...

CVE-2021-1519: Improper Input Validation

A vulnerability in the interprocess communication IPC channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to overwrite VPN profiles on an affected device. The vulnerability is due to insufficient validation of user-supplied input. An attacker...

CVE-2021-1426: Creation of Temporary File With Insecure Permissions

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

CVE-2021-1496: Creation of Temporary File With Insecure Permissions

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

CVE-2021-1429: Creation of Temporary File With Insecure Permissions

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

CVE-2021-1428: Creation of Temporary File With Insecure Permissions

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

CVE-2021-1430: Creation of Temporary File With Insecure Permissions

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

CVE-2021-1427: Creation of Temporary File With Insecure Permissions

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execut...

PT-2021-2964

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description The issue is related to multiple vulnerabilities in the install, uninstall, and upgrade processes of the software. These vulnerabilities could allo...

PT-2021-2979

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description The issue is related to the creation of temporary files with insecure permissions during the update process of Cisco AnyConnect Secure Mobility...

PT-2021-2978

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description The issue concerns multiple vulnerabilities in the install, uninstall, and upgrade processes of the software. These vulnerabilities could allow an...

PT-2021-2980

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description The issue is related to multiple vulnerabilities in the install, uninstall, and upgrade processes of the software. These vulnerabilities could allo...

PT-2021-3259

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client Software affected versions not specified Description A vulnerability in the interprocess communication IPC channel could allow an authenticated, local attacker to overwrite VPN profiles on an affected...

PT-2021-2974

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description The issue is related to multiple vulnerabilities in the install, uninstall, and upgrade processes of the software. These vulnerabilities could allo...

PT-2021-2967

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows affected versions not specified Description The issue is related to the creation of temporary files with insecure permissions during the uninstallation process of Cisco AnyConnect Secure...

Vulnerability fixed in Cisco AnyConnect Secure Mobility Client

A vulnerability in the IPC channel of Cisco AnyConnect Secure Mobility Client, an authenticated, local attacker can cause a Denial-of-Service DoS exploit on an affected device. To exploit this security vulnerability, the attacker must have have valid login credentials on the device. Cisco has...