Skip to content
RequestGuard Vulnerabilities
Pricing

CVE record

CVE-2020-3153

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.

CVE evidence

Known exploitation

Listed in CISA KEV

Absence from the fetched catalog does not establish that exploitation has not occurred.

Severity

unknown

No parseable CVSS vector returned

Affected packages

0

Supported package records returned by OSV. Vendor and product names are not used to infer matches.

CISA Known Exploited Vulnerabilities

Catalog record

Vendor / project
Cisco
Product
AnyConnect Secure
Date added
Oct 24, 2022
CISA federal remediation due date
Nov 14, 2022
Required action
Apply updates per vendor instructions.
Known ransomware campaign use
Known
CWE
CWE-427

OSV package mapping

Affected open-source packages

OSV did not return a package mapping in the five supported ecosystems. RequestGuard does not infer package names from the CISA vendor or product fields.