Skip to content
OpenAdvisories

Product · Cisco

Cisco AnyConnect Secure Mobility Client

23 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.7
    CVE-2021-40124

    Cisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability

    A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to incorrect privilege assig…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
  • Medium 5.5
    CVE-2021-1568

    Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability

    A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to uncontrolled memory allocation. An attacker co…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
  • Medium 4.7
    CVE-2021-1519

    Cisco AnyConnect Secure Mobility Client Profile Modification Vulnerability

    A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to overwrite VPN profiles on an affected device. The vulnerability is due to insufficient validati…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
  • Medium 5.5
    CVE-2021-1450

    Cisco AnyConnect Secure Mobility Client Denial of Service Vulnerability

    A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. To exploit this vulnerability, the atta…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
  • Medium 5.5
    CVE-2021-1258

    Cisco AnyConnect Secure Mobility Client Arbitrary File Read Vulnerability

    A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is du…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
  • Medium 5.5
    CVE-2020-27123

    Cisco AnyConnect Secure Mobility Client for Windows Arbitrary File Read Vulnerability

    A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to read arbitrary files on the underlying operating system of an affected device. The vulnerabi…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
  • Medium 5.9
    CVE-2019-16007

    Cisco AnyConnect Secure Mobility Client for Android Service Hijack Vulnerability

    A vulnerability in the inter-service communication of Cisco AnyConnect Secure Mobility Client for Android could allow an unauthenticated, local attacker to perform a service hijack attack on an affected device or cause a denial of service (DoS) condition. The…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
  • Medium 5.5
    CVE-2020-3434

    Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability

    A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. To exploit this vulnerabili…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
  • Medium 5.5
    CVE-2020-3435

    Cisco AnyConnect Secure Mobility Client for Windows Profile Modification Vulnerability

    A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to overwrite VPN profiles on an affected device. To exploit this vulnerability, the attacker wo…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
  • Medium 6.5
    CVE-2020-3153 Exploited · Ransomware Public exploit EPSS 29%

    Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

    A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices
    KEV Oct 24, 2022
  • Medium 4.8
    CVE-2019-1853

    Cisco AnyConnect Secure Mobility Client for Linux Out-of-Bounds Memory Read Vulnerability

    A vulnerability in the HostScan component of Cisco AnyConnect Secure Mobility Client for Linux could allow an unauthenticated, remote attacker to read sensitive information on an affected system. The vulnerability exists because the affected software performs…

    Cisco Cisco AnyConnect Secure Mobility Client Network devices