Anyconnect Secure Mobility Client vulnerabilitiesAnd the versions its exploited flaws hit.
Anyconnect Secure Mobility Client is made by Cisco. We track 68 published vulnerabilities in it, across 160 versions. 2 of them are on the list of flaws known to be exploited, the newest added on 24 October 2022. If you run Anyconnect Secure Mobility Client, check your version against the exploited flaws below and patch those first.
The most recent Anyconnect Secure Mobility Client flaw added to the known-exploited list is CVE-2020-3153, on 24 October 2022. We keep watching the known-exploited list.
Which versions of Anyconnect Secure Mobility Client do the exploited flaws hit?
Each exploited flaw lists the versions it affects, usually as ranges. "before 4.8.02042" means every version up to, but not including, 4.8.02042. Find your version, then patch.
- CVE-2020-3153Exploited list, 24 Oct 2022
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
before 4.8.02042 - CVE-2020-3433Exploited list, 24 Oct 2022
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
before 4.9.00086
Which Anyconnect Secure Mobility Client vulnerabilities are being exploited?
2 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 6.5Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths.
- 7.8Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time.
Which Anyconnect Secure Mobility Client flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 70%CVE-2011-2039High
The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without...
- 28%
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level...
- 11%CVE-2011-2040Critical
The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file...
- 10%
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack.
- 5.4%CVE-2023-20178High
A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to...
- 3.5%CVE-2016-9192High
A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to the Microsoft...
- 3.4%CVE-2018-0229Medium
A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication for Cisco AnyConnect Secure Mobility Client for Desktop Platforms, Cisco Adaptive Security...
- 2.0%CVE-2012-2496Medium
A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR7 on 64-bit Linux platforms does not properly restrict use of Java...
- 2.0%CVE-2013-5559Medium
Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code via a crafted...
Running Anyconnect Secure Mobility Client? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.
- Matched to
- Anyconnect Secure Mobility Client on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 68 published vulnerabilities listed under the name Anyconnect Secure Mobility Client, across 160 versions. The most recent Anyconnect Secure Mobility Client flaw added to the known-exploited list is CVE-2020-3153, on 24 October 2022.
2 are on the list of flaws known to be exploited. The most recently added are CVE-2020-3153 and CVE-2020-3433.
Each flaw names its own versions, usually as ranges. The newest, CVE-2020-3153, affects before 4.8.02042. The versions for every exploited flaw are listed on this page.
Create a Precursor Intelligence account and track Anyconnect Secure Mobility Client. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.