CVE-2023-20178

CVE-2023-20178 affects Cisco AnyConnect Secure Mobility Client for Windows and Cisco Secure Client for Windows. The issue arises in the client update process after a VPN connection, where improper permissions on a temporary directory created during the update could allow a low-privileged, authent...

CVE-2021-40124

Cisco AnyConnect Secure Mobility Client for Windows, Network Access Manager (NAM) module, contains a privilege-escalation vulnerability due to incorrect privilege assignment to scripts run before user logon. An authenticated, local attacker could exploit this to execute arbitrary code with SYSTEM...

CVE-2020-3153

Cisco AnyConnect Secure Mobility Client for Windows is affected by CVE-2020-3153: an attacker with valid Windows credentials can exploit the installer IPC path handling to copy files to system directories with SYSTEM privileges, enabling privilege escalation (and DLL hijacking) via vpndownloader....

CVE-2017-3813

CVE-2017-3813 | Cisco AnyConnect Secure Mobility Client for Windows contains a Start Before Logon (SBL) privilege-escalation vulnerability. The issue arises from insufficient access controls in the SBL module, allowing an unauthenticated, local attacker to start Internet Explorer with SYSTEM priv...

CVE-2020-3433

Cisco AnyConnect Secure Mobility Client for Windows is affected by a local DLL hijacking vulnerability in the IPC channel. An authenticated attacker with valid Windows credentials can craft IPC messages to the AnyConnect process, leading to remote code execution with SYSTEM privileges due to insu...

CVE-2021-1366

Cisco AnyConnect Secure Mobility Client for Windows with the Posture (HostScan) Module is affected by CVE-2021-1366. The vulnerability stems from insecure IPC handling in the Cisco Security Service (ciscod.exe) that allows local, authenticated attackers to perform DLL hijacking via crafted IPC me...

CVE-2017-6638

Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.4.02034 are affected by a local privilege escalation vulnerability due to incomplete input validation when loading DLLs. An authenticated local attacker who can place a malicious DLL in a system directory could exploit this t...

CVE-2019-16007

CVE-2019-16007 affects Cisco AnyConnect Secure Mobility Client for Android. Root cause: inter-service communication using implicit service invocations, enabling a local, unauthenticated attacker to hijack a service or cause a DoS by tricking a user into installing a malicious app. Impact noted as...

CVE-2020-3556

CVE-2020-3556 affects Cisco AnyConnect Secure Mobility Client (Windows/macOS/Linux). The IPC listener lacks authentication, allowing a local, authenticated attacker to send crafted IPC messages to cause the targeted user to execute a script with the user’s privileges. Exploitation requires an ong...

CVE-2012-2498

CVE-2012-2498 affects Cisco AnyConnect Secure Mobility Client 3.0–3.0.08066, where authentication may accept crafted certificates, allowing user-assisted or unauthenticated MITM to spoof servers due to insufficient certificate validation (Bug CSCtz29197). Cisco issued the advisory Cisco-SA-201208...

CVE-2012-2494

CVE-2012-2494 affects Cisco AnyConnect Secure Mobility Client: the VPN WebLaunch downloader does not compare the timestamp of the offered vpndownloader.exe with the installed version, enabling a downgrade to older releases. Affected product/version ranges include Cisco AnyConnect Secure Mobility ...

CVE-2021-1237

Cisco AnyConnect Secure Mobility Client for Windows is affected by CVE-2021-1237 in the Network Access Manager and Web Security Agent components. The issue stems from insufficient validation of runtime-loaded resources, enabling an authenticated, local attacker with valid Windows credentials to c...

CVE-2020-3434

Cisco AnyConnect Secure Mobility Client for Windows contains a local DoS vulnerability (CVE-2020-3434) in the IPC channel. An authenticated user with Windows credentials can send crafted IPC messages to stop the VPN Agent process, causing DoS. Root cause: insufficient validation of user-supplied ...

CVE-2020-3432

Cisco AnyConnect Secure Mobility Client for Mac OS contains a local-file corruption vulnerability in its uninstaller component caused by improper handling of directory paths. An authenticated, local attacker can exploit this by creating a symbolic link to a target file on a specific path, potenti...

CVE-2017-6788

The CVE-2017-6788 issue affects Cisco AnyConnect Secure Mobility Client’s WebLaunch feature. Root cause: insufficient input validation of parameters passed to WebLaunch enables stored/reflected XSS when a user is induced to visit a crafted link or when a request is intercepted and modified. Affec...

CVE-2021-1567

CVE-2021-1567 describes a local, authenticated race-condition DLL hijack in Cisco AnyConnect Secure Mobility Client for Windows when the VPN Posture (HostScan) Module is installed. The vulnerability stems from the DLL loading/signature verification path during IPC-driven file copies, allowing an ...

CVE-2018-0229

CVE-2018-0229 affects Cisco AnyConnect Secure Mobility Client, ASA, and FTD software configured for SAML 2.0-based SSO. Root cause: ASA/FTD fail to detect if an authentication request originates from the AnyConnect client, enabling a session-fixation path where a user’s IdP authentication token c...

CVE-2018-0334

CVE-2018-0334 affects Cisco AnyConnect Network Access Manager and AnyConnect Secure Mobility Client across iOS, macOS, Android, Windows, and Linux. The root cause is improper use of the Simple Certificate Enrollment Protocol (SCEP) and inadequate server certificate validation in the certificate m...

CVE-2021-1258

CVE-2021-1258 affects Cisco AnyConnect Secure Mobility Client. The upgrade component contains a flaw with insufficient file permission restrictions, allowing an authenticated, low-privilege, local attacker to read arbitrary files from the underlying OS by sending a crafted command via the local C...

CVE-2023-20240

Cisco Secure Client Software (formerly AnyConnect Secure Mobility Client) contains CVE-2023-20240: multiple DoS vulnerabilities caused by an out-of-bounds memory read. An authenticated, local attacker on a multi-user system can log in alongside another user, craft packets to a local port, and cra...

CVE-2015-6305

CVE-2015-6305 affects Cisco AnyConnect Secure Mobility Client for Windows (versions 2.0–4.1). The issue arises from untrusted search path handling in vpndownloader.exe’s CMainThread::launchDownloader, enabling a local attacker with valid credentials to plant a malicious DLL in the current working...

CVE-2012-2493

Cisco AnyConnect Secure Mobility Client is affected by CVE-2012-2493 due to a vulnerable WebLaunch VPN downloader that does not properly validate downloaded binaries. This allows remote code execution via ActiveX or Java components. Affected products include Windows 2.x builds before 2.5 MR6, and...

CVE-2021-1450

The CVE-2021-1450 issue affects Cisco AnyConnect Secure Mobility Client. A vulnerability in the IPC channel allows an authenticated, local attacker to cause a DoS on an affected device by sending crafted IPC messages to the AnyConnect process. The root cause is insufficient validation of user-sup...

CVE-2011-2039

Cisco AnyConnect Secure Mobility Client (Windows and Windows Mobile)

CVE-2020-27123

CVE-2020-27123 affects Cisco AnyConnect Secure Mobility Client for Windows. A vulnerability in the Interprocess Communication (IPC) channel, due to an exposed IPC function, lets an authenticated, local attacker craft an IPC message to the AnyConnect process to read arbitrary files on the underlyi...

CVE-2020-3435

Cisco AnyConnect Secure Mobility Client for Windows is affected by CVE-2020-3435, an IPC channel vulnerability that allows an authenticated, local attacker to overwrite VPN profiles due to insufficient validation of input. The issue enables modification of VPN profile files via crafted IPC messag...

CVE-2021-1568

Cisco AnyConnect Secure Mobility Client for Windows is affected by CVE-2021-1568, a DoS caused by uncontrolled memory allocation. An authenticated, local user can trigger a crash of the VPN Agent service by copying a crafted file to a specific folder on a multiuser Windows system. Repro requires ...

CVE-2024-20474

CVE-2024-20474 is a Cisco Secure Client (formerly AnyConnect) vulnerability where the IKEv2 processing contains an integer underflow, allowing an unauthenticated remote attacker to crash the client and cause a DoS. A crafted IKEv2 packet can exploit the flaw on affected systems. Affected releases...

CVE-2015-4211

Cisco AnyConnect Secure Mobility Client on Windows has a local privilege escalation via path validation failure in the vpndownloader launcher (CMainThread::launchDownloader). A crafted DLL load path (DLL planting) and the downloader’s location bypass the intended checks, enabling a local user to ...

CVE-2016-9192

CVE-2016-9192 affects Cisco AnyConnect Secure Mobility Client for Windows. Root cause: incorrect permissions on a system directory during installation allow a local, authenticated attacker to escalate to SYSTEM by issuing a crafted IPC to the VPN agent. Impact: arbitrary executable execution with...

CVE-2023-20241

Cisco Secure Client Software (formerly AnyConnect) is affected by multiple DoS vulnerabilities due to an out-of-bounds memory read. An authenticated, local attacker who has credentials on a multi-user system can exploit this by logging in while another user is active, sending crafted packets to a...

CVE-2013-1173

CVE-2013-1173 is a heap-based buffer overflow in ciscod.exe within the Cisco Security Service of Cisco AnyConnect Secure Mobility Client. Exploitation enables local privilege escalation to SYSTEM. Affected: Cisco AnyConnect Secure Mobility Client (Host Scan component) with vulnerable host-scan ha...

CVE-2015-6322

CVE-2015-6322 affects Cisco AnyConnect Secure Mobility Client IPC channel. The vulnerability arises from missing source-path validation in IPC commands, allowing a local attacker to bypass access restrictions and move arbitrary files with elevated privileges. Affected products include AnyConnect ...

CVE-2021-1519

Cisco AnyConnect Secure Mobility Client contains a vulnerability in its interprocess communication (IPC) channel (CVE-2021-1519). The issue stems from insufficient validation of user-supplied input, allowing an authenticated, local attacker to send a crafted IPC message and modify VPN profile fil...

CVE-2021-1430

CVE-2021-1430 pertains to Cisco AnyConnect Secure Mobility Client for Windows. The documented issue is DLL and executable hijacking during install, uninstall, and upgrade processes, allowing an authenticated local attacker to hijack files used by the application and potentially execute arbitrary ...

CVE-2015-0662

Cisco AnyConnect Secure Mobility Client is affected by CVE-2015-0662 due to unauthenticated IPC commands that allow installation of a root-owned software package, enabling local privilege escalation. Affected versions include 4.0(.00051) and earlier (and related 4.0/4.1 lines noted in Nessus chec...

CVE-2015-4289

Cisco AnyConnect Secure Mobility Client 4.0(2049) is affected by a directory traversal vulnerability that allows an unauthenticated head-end to craft attributes and cause the client to write arbitrary files in the active user’s context. The issue stems from insufficient input validation during co...

CVE-2015-0665

CVE-2015-0665 affects Cisco AnyConnect Secure Mobility Client via the Hostscan IPC path traversal. A local authenticated attacker can exploit crafted IPC commands to write or overwrite arbitrary files. Affected: 4.0(.00051) and earlier Hostscan IPC handling (path traversal vulnerability). Impact:...

CVE-2021-1496

Cisco AnyConnect Secure Mobility Client for Windows is affected by DLL and executable hijacking vulnerabilities in the install, uninstall, and upgrade processes (CVE-2021-1496). An authenticated, local attacker with valid Windows credentials could hijack DLL or executables used by the client to e...

CVE-2017-12268

Cisco AnyConnect Secure Mobility Client’s Network Access Manager (NAM) contains a local, authenticated vulnerability that allows enabling multiple network adapters (Dual-Homed Interface) due to insufficient NAM policy enforcement. An attacker could manipulate device interfaces to sustain multiple...

CVE-2021-1426

CVE-2021-1426 concerns Cisco AnyConnect Secure Mobility Client for Windows. The connected sources confirm multiple vulnerabilities in the install, uninstall, and upgrade processes that allow an authenticated, local attacker to hijack DLLs or executables used by the client, enabling arbitrary code...

CVE-2018-0373

CVE-2018-0373 affects Cisco AnyConnect Secure Mobility Client for Windows Desktop, specifically vpnva-6.sys (32-bit) and vpnva64-6.sys (64-bit). A local, authenticated attacker can exploit improper validation of user-supplied data to cause a Denial of Service on the affected system. The vulnerabi...

CVE-2019-1853

CVE-2019-1853 affects Cisco AnyConnect Secure Mobility Client for Linux, in the HostScan component. The root cause is improper bounds checks that enable an unauthenticated, remote attacker to perform an out-of-bounds memory read by sending crafted HTTP traffic to the affected component, potential...

CVE-2021-1429

CVE-2021-1429 affects Cisco AnyConnect Secure Mobility Client for Windows. The issue involves DLL and executable hijacking during install, uninstall, and upgrade processes, enabling an authenticated, local attacker with valid credentials to hijack files used by the application and potentially exe...

CVE-2011-2041

CVE-2011-2041 describes a Local Privilege Escalation in Cisco AnyConnect Secure Mobility Client on Windows (and Windows Mobile) via the Start Before Logon (SBL) UI. Unprivileged users can elevate to LocalSystem by interacting with the GUI at the Windows logon screen. The issue is restricted to Wi...

CVE-2012-2495

Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR8 and Cisco Secure Desktop before 3.6.6020 are affected by CVE-2012-2495 due to the HostScan downloader not comparing the timestamp of offered software to the installed version, enabling remote downgrade via ActiveX or Java components. Root...

CVE-2021-34788

The CVE-2021-34788 issue affects Cisco AnyConnect Secure Mobility Client for Linux and macOS when the VPN Posture (HostScan) Module is installed. It is caused by a race condition in the signature verification of shared library files loaded by the AnyConnect process, enabling a local, authenticate...

CVE-2011-2040

Summary of CVE-2011-2040 (Cisco AnyConnect Arbitrary Program Execution) : The helper application used during pre-deployment downloads the Cisco AnyConnect client via a web browser without authenticating the downloaded executable (vpndownloader.exe) on Linux and Mac OS X, enabling remote code exec...

CVE-2015-0664

Cisco AnyConnect Secure Mobility Client (affected: 4.0(.00051) and earlier) contains an IPC channel vulnerability (CVE-2015-0664) that allows a local attacker to write to arbitrary user-space memory and escalate privileges via specially crafted IPC messages. Multiple Nessus/Cisco advisories reite...

CVE-2015-4290

CVE-2015-4290 affects Cisco AnyConnect Secure Mobility Client for macOS (kernel extension) in the 4.0(2049) build. The issue stems from insufficient bounds checking in the kernel extension, allowing a local, authenticated attacker to craft contiguous memory data read by the client and trigger an ...