CVE-2020-3153 — Actively Exploited: AnyConnect Secure (Cisco)
Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.
| CVE ID | CVE-2020-3153 |
|---|---|
| Vendor | Cisco |
| Product | AnyConnect Secure |
| Vulnerability name | Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability |
| Date added | 2022-10-24 |
| Remediation due | 2022-11-14 |
| Known ransomware use | Known |
| Required action | Apply updates per vendor instructions. |
| Description | Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks. |
| Source | CISA Known Exploited Vulnerabilities |
🔍 Search all exploited vulnerabilities →
$1499/mo
Try ExploitWatch →