Skip to content
fr Sign in
7.3 High

CVE-2024-20338 A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated,…

Description

A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to the use of an uncontrolled search path element. An attacker could exploit this vulnerability by copying a malicious library file to a specific directory in the filesystem and persuading an administrator to restart a specific process. A successful exploit could allow the attacker to execute arbitrary code on an affected device with root privileges.

Affected products and versions

Product Affected versions Fixed in
Cisco Secure Client Versions not published
secure_client 5.1 earliest → < 5.1.2.42 5.1.2.42

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Secure Client

The 10 CVEs of Cisco Secure Client →
CVE-2026-76462 A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure… 5.5 Medium CVE-2025-20206 A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an… 7.1 High CVE-2020-3432 A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an… 5.6 Medium CVE-2024-20474 A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an… 4.3 Medium
Track this CVE