Cisco AnyConnect Secure Mobility Client for Windows Desktop Input Validation Vulnerability

Cisco AnyConnect Secure Mobility Client for Windows Desktop is a secure mobility client for the Windows platform from Cisco that provides secure access to networks and applications from any device. An input validation vulnerability exists in the vpnva-6.sys file and the vpnva64-6.sys file in Cisc...

CVE-2018-0373

CVE-2018-0373 affects Cisco AnyConnect Secure Mobility Client for Windows Desktop, specifically vpnva-6.sys (32-bit) and vpnva64-6.sys (64-bit). A local, authenticated attacker can exploit improper validation of user-supplied data to cause a Denial of Service on the affected system. The vulnerabi...