Unrated
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges. CISA required action: Apply updates per vendor instructions.
Announced Source revision 1
Original source ↗CVE-2020-3433
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: kev:CVE-2020-3433
AnyConnect Secure
Source reference: /product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
- Related CVEs
- CVE-2020-3433
Source reference:
/cveID
Publisher severity
No explicit severity was provided.
- Event
- #1411 · Revision 1
- Added to Heist Feed
- Publisher date