Cisco Secure Client NAM Module Privilege Escalation (cisco-sa-secure-nam-priv-esc-szu2vYpZ)

A vulnerability in the Network Access Manager NAM module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit...

CVE-2024-20391

A vulnerability in the Network Access Manager NAM module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit...

CVE-2024-20391

A vulnerability in the Network Access Manager NAM module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit...

CVE-2024-20391

A vulnerability in the Network Access Manager NAM module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit...

CVE-2024-20391

A vulnerability in the Network Access Manager NAM module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit...

CVE-2024-20391

CVE-2024-20391 concerns the Cisco Secure Client’s Network Access Manager (NAM) module. The issue arises from a lack of authentication on a specific function, allowing an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM and execute arbitrary code ...

PT-2024-18657 · Cisco · Cisco Secure Client

Name of the Vulnerable Software and Affected Versions: Cisco Secure Client affected versions not specified Description: A lack of authentication on a specific function in the Network Access Manager NAM module could allow an unauthenticated attacker with physical access to an affected device to...

Cisco Secure Client 安全漏洞

Cisco Secure Client is a software used to connect to virtual private networks from Cisco USA. A security vulnerability exists in Cisco Secure Client that stems from a lack of authentication for specific functions, allowing an unauthenticated attacker to gain physical access to an affected device...

CVE-2023-34298

Pulse Secure Client SetupService Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Pulse Secure Client. An attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2023-34298

Pulse Secure Client SetupService Directory Traversal Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Pulse Secure Client. An attacker must first obtain the ability to execute low-privileged code on the target...

CVE-2023-34298

CVE-2023-34298 affects Pulse Secure Client via the SetupService directory traversal flaw. The issue stems from inadequate validation of a user-supplied path before file operations, allowing a local attacker who can run low-privilege code to escalate privileges and potentially execute arbitrary co...

Pulse Secure Client 安全漏洞

Pulse Secure Client is a suite of client software from Pulse Secure USA for end devices that access the Pulse Secure gateway. A security vulnerability exists in Pulse Secure Client that stems from failure to properly validate a user-supplied path before using it in a file operation, allowing a...

Cisco Secure Client Flaw Enables Attackers To Steal VPN Sessions

Summary: A high severity vulnerability tracked as CVE-2024-20337 have been addressed by Cisco affecting its Secure Client software that could allow a threat actor to start a VPN session with the targeted user. Threat Level - Red | Vulnerability Report For a detailed threat advisory, download the...

The vulnerability of the ISE Posture (System Scan) module of the Cisco Secure Client (formerly Cisco AnyConnect Secure Mobility Client) security solution allows attackers to enhance their privileges.

The vulnerability of the ISE Posture System Scan module of the Cisco Secure Client formerly Cisco AnyConnect Secure Mobility Client security solution is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Cisco Secure Client (formerly Cisco AnyConnect Secure Mobility Client) endpoint security mechanism lies in the lack of measures to neutralize CRLF sequences, allowing attackers to execute arbitrary code in the browser.

The vulnerability of the Cisco Secure Client formerly Cisco AnyConnect Secure Mobility Client security mechanism is related to the failure to handle CRLF sequences properly. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the browser, provided that the user...

Cisco Issues Patch for High-Severity VPN Hijacking Bug in Secure Client

Cisco has released patches to address a high-severity security flaw impacting its Secure Client software that could be exploited by a threat actor to open a VPN session with that of a targeted user. The networking equipment company described the vulnerability, tracked as CVE-2024-20337 CVSS score...

Cisco Releases Security Updates for Secure Client

Cisco released security updates to address vulnerabilities in Cisco Secure Client and Secure Client for Linux. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the following security releases...

Vulnerability fixed in Cisco Secure Client

Cisco has fixed a vulnerability in the Secure Client. A malicious party could exploit the vulnerability to use a malicious link to gain access to the SAML token of the victim and thus establish a VPN connection. Access to underlying systems and applications still require authentication. Cisco has...

Cisco Secure Client Carriage Return Line Feed Injection (cisco-sa-secure-client-crlf-W43V4G7)

According to its self-reported version, Cisco Secure Client, formerly AnyConnect Secure Mobility Client, is affected by a vulnerability in the SAML authentication process of Cisco Secure Client. The vulnerability could allow an unauthenticated, remote attacker to conduct a carriage return line fe...

CVE-2024-20338

A vulnerability in the ISE Posture System Scan module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to the use of an uncontrolled search path element. An attacker could exploit this vulnerabilit...