Advisories · Technology

Cisco AnyConnect Secure Mobility Client.

Every CVE that names Cisco AnyConnect Secure Mobility Client among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-40124 CVE record

CVSS 6.7 Medium

Cisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability
- Cisco AnyConnect Secure Mobility Client
- Privilege escalation
Not analysed yet 4 Nov 2021
CVE-2021-34788 CVE record

CVSS 7.0 High

Cisco AnyConnect Secure Mobility Client for Linux and Mac OS with VPN Posture (HostScan) Module Shared Library Hijacking Vulnerability
- Cisco AnyConnect Secure Mobility Client
- Race condition
Not analysed yet 6 Oct 2021
CVE-2021-1567 CVE record

CVSS 7.0 High

Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability
- Cisco AnyConnect Secure Mobility Client
- Race condition
Not analysed yet 16 Jun 2021
CVE-2021-1568 CVE record

CVSS 5.5 Medium

Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability
- Cisco AnyConnect Secure Mobility Client
- Denial of service
Not analysed yet 16 Jun 2021
CVE-2021-1519 CVE record

CVSS 4.7 Medium

Cisco AnyConnect Secure Mobility Client Profile Modification Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-20
Not analysed yet 6 May 2021
CVE-2021-1426 CVE record

CVSS 7.0 High

Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities
- Cisco AnyConnect Secure Mobility Client
- CWE-378
Not analysed yet 6 May 2021
CVE-2021-1427 CVE record

CVSS 7.0 High

Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities
- Cisco AnyConnect Secure Mobility Client
- CWE-378
Not analysed yet 6 May 2021
CVE-2021-1496 CVE record

CVSS 7.0 High

Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities
- Cisco AnyConnect Secure Mobility Client
- CWE-378
Not analysed yet 6 May 2021
CVE-2021-1429 CVE record

CVSS 7.0 High

Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities
- Cisco AnyConnect Secure Mobility Client
- CWE-378
Not analysed yet 6 May 2021
CVE-2021-1430 CVE record

CVSS 7.0 High

Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities
- Cisco AnyConnect Secure Mobility Client
- CWE-378
Not analysed yet 6 May 2021
CVE-2021-1428 CVE record

CVSS 7.0 High

Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities
- Cisco AnyConnect Secure Mobility Client
- CWE-378
Not analysed yet 6 May 2021
CVE-2021-1450 CVE record

CVSS 5.5 Medium

Cisco AnyConnect Secure Mobility Client Denial of Service Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-20
Not analysed yet 24 Feb 2021
CVE-2021-1366 CVE record

CVSS 7.8 High

Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability
- Cisco AnyConnect Secure Mobility Client
- Weak cryptography or TLS
Not analysed yet 17 Feb 2021
CVE-2021-1258 CVE record

CVSS 5.5 Medium

Cisco AnyConnect Secure Mobility Client Arbitrary File Read Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-264
Not analysed yet 13 Jan 2021
CVE-2021-1237 CVE record

CVSS 7.8 High

Cisco AnyConnect Secure Mobility Client for Windows DLL Injection Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-427
Not analysed yet 13 Jan 2021
CVE-2020-3556 CVE record

CVSS 7.3 High

Cisco AnyConnect Secure Mobility Client Arbitrary Code Execution Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-20
Not analysed yet 6 Nov 2020
CVE-2020-27123 CVE record

CVSS 5.5 Medium

Cisco AnyConnect Secure Mobility Client for Windows Arbitrary File Read Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-749
Not analysed yet 6 Nov 2020
CVE-2019-16007 CVE record

CVSS 5.9 Medium

Cisco AnyConnect Secure Mobility Client for Android Service Hijack Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-345
Not analysed yet 23 Sept 2020
CVE-2020-3433 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-427
Not analysed yet 17 Aug 2020
CVE-2020-3434 CVE record

CVSS 5.5 Medium

Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-20
Not analysed yet 17 Aug 2020
CVE-2020-3435 CVE record

CVSS 5.5 Medium

Cisco AnyConnect Secure Mobility Client for Windows Profile Modification Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-20
Not analysed yet 17 Aug 2020
CVE-2020-3153 CVE record

CVSS 6.5 MediumCritical · KEVKEV · ransomware

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
- Cisco AnyConnect Secure Mobility Client
- CWE-427
Not analysed yet 19 Feb 2020
CVE-2019-1853 CVE record

CVSS 4.8 Medium

Cisco AnyConnect Secure Mobility Client for Linux Out-of-Bounds Memory Read Vulnerability
- Cisco AnyConnect Secure Mobility Client
- Memory corruption
Not analysed yet 16 May 2019
CVE-2016-9192 CVE record

Cisco AnyConnect Secure Mobility Client: A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an…
- Cisco AnyConnect Secure Mobility Client
Not analysed yet 14 Dec 2016