Cisco · AnyConnect Secure
CVE-2020-3153
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
O que é
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks. To exploit this vulnerability, the attacker needs valid credentials on the Windows system.
CISA: Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.
O que fazer
Apply updates per vendor instructions.
Prazo para as agências federais dos EUA: 14 de novembro de 2022
- Adicionada à lista da CISA
- 24 de outubro de 2022
- Publicada
- 19 de fevereiro de 2020
- Gravidade
- Média 6,5 CVSS 3.0
- Chance de ataques nos próximos 30 dias (EPSS)
- 28% entre os 1,9% mais altos de todas as vulnerabilidades conhecidas
- Fraqueza
- CWE-427
- Mais detalhes
- NVD · CVE.org · CISA
Todas as referências (5)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ac-win-path-traverse-qO4HWBsj
- http://seclists.org/fulldisclosure/2020/Apr/43
- http://packetstormsecurity.com/files/157340/Cisco-AnyConnect-Secure-Mobility-Client-4.8.01090-Privilege-Escal…
- http://packetstormsecurity.com/files/158219/Cisco-AnyConnect-Path-Traversal-Privilege-Escalation.html
- http://packetstormsecurity.com/files/159420/Cisco-AnyConnect-Privilege-Escalation.html
Mais falhas exploradas de Cisco
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 24 de out. de 2022 | Mobility Client for Windows DLL Hijacking | AnyConnect Secure | Alto 7,8 | 10% |
| 14 de out. de 2026 | Relative Path Traversal | Secure Email Gateway | Crítica 9,8 | 2,2% |
| 30 de set. de 2026 | Hex Encoding | Catalyst SD-WAN Manager | Crítica 9,8 | 39% |
| 16 de set. de 2026 | Incorrect Use of Privileged APIs | Identity Services Engine | Crítica 10,0 | 76% |
| 14 de set. de 2026 | SQL Injection | Secure Email Gateway | Crítica 9,8 | 30% |
| 9 de set. de 2026 | Firewall Management Center Authentication Bypass Using an Alternate Path or Channel | Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | Crítica 10,0 | 88% |
| 11 de ago. de 2026 | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection | Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) | Alto 8,6 | 1,0% |
| 29 de jul. de 2026 | Secure Firewall Management Center Use of Hard-coded Password | Secure Firewall Management Center (FMC) | Média 5,3 | 35% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.