CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2020-31536.5/MEDIUMEPSS 28.5%CISA KEV
2020-02-19

Cisco AnyConnect Secure Mobility Client for Windows Path Traversal Local Privilege Escalation (CVE-2020-3153) Security Advisory

[Affected Scope] Cisco AnyConnect Secure Mobility Client for Windows versions 4.8.01090 and prior

[Impact] An authenticated local attacker can copy arbitrary malicious DLL files to system-level directories, leading to arbitrary code execution with SYSTEM privileges

[Mitigation] Immediately upgrade to the patched official release (version 4.8.02042 or later)

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse