Live › vulnerability › CVE-2020-3153
Go to dashboardCisco AnyConnect Secure Mobility Client for Windows mishandles directory paths, letting a local user with valid credentials copy files to arbitrary locations with system privileges. An attacker can use this for DLL preloading and hijacking to gain SYSTEM on the machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Cisco AnyConnect Secure | vendor | – | – |
| cisco anyconnect secure mobility client | vendor | < 4.8.02042 | 4.8.02042 |
Unknown from the sources.
Apply the Cisco AnyConnect Secure Mobility Client update per vendor instructions (CISA KEV action); the fixed version is unknown from these sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks. To exploit this vulnerability, the attacker needs valid credentials on the Windows system.
This page as .md · .json · in your agent: get_signal("CVE-2020-3153")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.