[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUkGvhHXpKSVCygIuhh6fDBSTZBelZ8NrSpjm-ESblB4":3,"g5a-risk:CVE-2023-20178":120},{"success":4,"data":5,"meta":117},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":45,"references":46,"referencesCount":52,"weaknesses":53,"weaknessesCount":52,"isActivelyExploited":62,"cisaInfo":26,"otxData":26,"relatedBlogPosts":63,"seoMetadata":64,"configurations":89,"relatedVendorCves":101,"notableEvents":102},"CVE-2023-20178","What is CVE-2023-20178?","A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to elevate privileges to those of SYSTEM. The client update process is executed after a successful VPN connection is established.\r\n\r This vulnerability exists because improper permissions are assigned to a temporary directory that is created during the update process. An attacker could exploit this vulnerability by abusing a specific function of the Windows installer process. A successful exploit could allow the attacker to execute code with SYSTEM privileges.","A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows cou...","2023-06-28T15:15:09.88","2024-01-25T17:15:32.647",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"ykramarz@cisco.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.05374,[33,33,33,33,33,33,33],"High",[37,42],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"cisco","anyconnect_secure_mobility_client","*","cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:windows:*:*",{"vendor":38,"product":43,"version":40,"criteria":44,"vulnerable":4},"secure_client","cpe:2.3:a:cisco:secure_client:*:*:*:*:*:windows:*:*",2,[47],{"url":48,"source":49,"tags":50},"https:\u002F\u002Fsec.cloudapps.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-ac-csc-privesc-wx4U4Kw","Cisco",[51],"Vendor Advisory",1,[54],{"id":55,"name":56,"description":57,"extendedDescription":58,"status":59,"abstraction":60,"structure":61},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",false,[],{"title":65,"metaDescription":66,"keywords":67,"canonicalUrl":68,"structuredData":69},"What is CVE-2023-20178? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-20178, a high severity cyber security vulnerability from 2023. A vulnerability in the client update process of Cisco AnyCo...","CVE-2023-20178, CVE-2023-20178 vulnerability, CVE-2023-20178 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, cisco security, anyconnect_secure_mobility_client vulnerability, secure_client vulnerability","\u002Fwhat-is\u002Fcve-2023-20178",{"@context":70,"@type":71,"headline":65,"description":66,"datePublished":10,"dateModified":11,"author":72,"publisher":76,"about":80,"mainEntityOfPage":84,"articleSection":87,"keywords":88},"https:\u002F\u002Fschema.org","TechArticle",{"@type":73,"name":74,"url":75},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":73,"name":74,"url":75,"logo":77},{"@type":78,"url":79},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":81,"name":6,"description":82,"additionalType":83},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":85,"@id":86},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-20178","Cybersecurity","CVE-2023-20178, CVE-2023-20178 vulnerability, CVE-2023-20178 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[90],{"Operator":26,"Negate":26,"Nodes":91},[92],{"Operator":93,"Negate":26,"CPEMatch":94},"OR",[95,98],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":96,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":97,"VersionEndIncluding":26},"9980A481-8A54-475A-B735-0C339FF30314","4.10.07061",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":99,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":100,"VersionEndIncluding":26},"7A856448-9BF4-4693-A1EA-3B6C06DB4259","5.0.02075",[],[103,110],{"id":104,"eventType":105,"eventTime":106,"details":107,"label":108,"color":109},"9f870dec-54ce-4b88-9523-3cb28938513f","LOW_EPSS_DELTA","2025-11-19T04:05:25.23386+00:00","Daily EPSS score decreased by 0.257 on 2023-12-30","EPSS Score Decreased","green",{"id":111,"eventType":112,"eventTime":113,"details":114,"label":115,"color":116},"d934524b-b2ba-49e6-b651-934cb780519c","HIGH_EPSS_DELTA","2025-11-22T04:05:13.208942+00:00","Daily EPSS score increased by 0.257 on 2023-12-30","EPSS Score Increased","red",{"lastModified":11,"cacheTime":118,"version":119},1792340598671,"2.0",{"score":121,"band":122,"action":123,"scoredAt":124},46,"Medium","Plan remediation","2026-10-16T06:58:25.42698+00:00"]