6.8
Moyenne
CVE-2024-20391 A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated…
Description
A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM. This vulnerability is due to a lack of authentication on a specific function. A successful exploit could allow the attacker to execute arbitrary code with SYSTEM privileges on an affected device.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Secure Client 5.1 | 5.1.0.136 → 5.1.2.42 | Pas de correctif indiqué |
| Cisco Secure Client 5.0 | 5.0.00238 → 5.0.05040 | Pas de correctif indiqué |
| Cisco Secure Client 4.10 | 4.10.00093 → 4.10.08029 | Pas de correctif indiqué |
| Cisco Secure Client 4.9 | 4.9.00086 → 4.9.06037 | Pas de correctif indiqué |
| secure_client | 5.1.2.42 | Pas de correctif indiqué |
Références
- cisco-sa-secure-nam-priv-esc-szu2vYpZ sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Secure Client
Les 10 CVE de Cisco Secure Client →
CVE-2026-76462
A vulnerability in the interprocess communication (IPC) channel of the Secure Firewall Posture module in Cisco Secure…
5.5
Moyenne
CVE-2025-20206
A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an…
7.1
Élevée
CVE-2020-3432
A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an…
5.6
Moyenne
CVE-2024-20474
A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an…
4.3
Moyenne