6.7 Moyenne

CVE-2021-40124 A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows…

Description

A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to incorrect privilege assignment to scripts executed before user logon. An attacker could exploit this vulnerability by configuring a script to be executed before logon. A successful exploit could allow the attacker to execute arbitrary code with SYSTEM privileges.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco AnyConnect Secure Mobility Client	Versions non publiées

Références

20211103 Cisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability tools.cisco.com

Chronologie

Publiée 4 novembre 2021
Dernière modification 7 novembre 2024

Les 23 CVE de Cisco AnyConnect Secure Mobility Client →

CVE-2021-34788 A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac… 7.0 Élevée CVE-2021-1567 A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allow an… 7.0 Élevée CVE-2021-1568 A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to… 5.5 Moyenne CVE-2021-1519 A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software… 4.7 Moyenne

Suivre cette CVE