5.5 Moyenne

CVE-2020-27123 A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows…

Description

A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to read arbitrary files on the underlying operating system of an affected device. The vulnerability is due to an exposed IPC function. An attacker could exploit this vulnerability by sending a crafted IPC message to the AnyConnect process on an affected device. A successful exploit could allow the attacker to read arbitrary files on the underlying operating system of the affected device.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco AnyConnect Secure Mobility Client	Versions non publiées

Références

20201104 Cisco AnyConnect Secure Mobility Client for Windows Arbitrary File Read Vulnerability tools.cisco.com

Chronologie

Publiée 6 novembre 2020
Dernière modification 13 novembre 2024

Les 23 CVE de Cisco AnyConnect Secure Mobility Client →

CVE-2021-40124 A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows… 6.7 Moyenne CVE-2021-34788 A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac… 7.0 Élevée CVE-2021-1567 A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allow an… 7.0 Élevée CVE-2021-1568 A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to… 5.5 Moyenne

Suivre cette CVE