CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-08-17
Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Local Privilege Escalation (CVE-2020-3433)
[Affected Scope] Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.9.03015
[Impact] An authenticated local attacker can exploit the IPC channel to load a malicious DLL, leading to arbitrary code execution with NT AUTHORITY\SYSTEM privileges.
[Mitigation] Immediately upgrade all affected Windows endpoints to Cisco AnyConnect Secure Mobility Client version 4.9.03015 or later.