Vulnerability in Cisco Anyconnect Secure Mobility Client
CVE-2020-3433
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The vulnerability is due to insufficient validation of resources that are loaded by the application at run time. An attacker could exploit this vulnerability by sending a crafted IPC message to the AnyConnect process. A successful exploit could allow the attacker to execute arbitrary code on the affected machine with SYSTEM privileges. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system.
EPSS: 0.100 (95.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
Weakness classification (CWE)
CISA KEV (Known Exploited Vulnerabilities)
This CVE is on the CISA KEV catalog, added on . CISA KEV inclusion means CISA has confirmed in-the-wild exploitation; US federal agencies are required to remediate within a published due date.
BOD 22-01 due date: .
Required action: Apply updates per vendor instructions.
Known ransomware campaign use: yes.
Public proof-of-concept exploits
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (US Government Resource)
Frequently asked questions
- What is CVE-2020-3433?
- CVE-2020-3433 is a high-severity vulnerability in Cisco Anyconnect Secure Mobility Client, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2020-08-17.
- How severe is CVE-2020-3433?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2020-3433 known to be exploited?
- Yes. CVE-2020-3433 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2022-10-24), indicating it is being actively exploited. 12 public proof-of-concept repositories are indexed.