Skip to content
fr Sign in
5.9 Medium

CVE-2019-16007 A vulnerability in the inter-service communication of Cisco AnyConnect Secure Mobility Client for Android could allow an…

Description

A vulnerability in the inter-service communication of Cisco AnyConnect Secure Mobility Client for Android could allow an unauthenticated, local attacker to perform a service hijack attack on an affected device or cause a denial of service (DoS) condition. The vulnerability is due to the use of implicit service invocations. An attacker could exploit this vulnerability by persuading a user to install a malicious application. A successful exploit could allow the attacker to access confidential user information or cause a DoS condition on the AnyConnect application.

Affected products and versions

Product Affected versions Fixed in
Cisco AnyConnect Secure Mobility Client Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco AnyConnect Secure Mobility Client

The 23 CVEs of Cisco AnyConnect Secure Mobility Client →
CVE-2021-40124 A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows… 6.7 Medium CVE-2021-34788 A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac… 7.0 High CVE-2021-1567 A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allow an… 7.0 High CVE-2021-1568 A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to… 5.5 Medium
Track this CVE