cve-2020-3433

HIGH CVSS 7.8 cisa_known_exploited

Description

Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges.

Timeline

Published: 2022-10-24
Last Modified: 2022-10-24

CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 7.8,
  "datePublished": "2022-10-24",
  "dateUpdated": "2022-10-24",
  "description": "Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges.",
  "dueDate": "2022-11-14",
  "id": "CVE-2020-3433",
  "kev_catalogs": [
    "cisa"
  ],
  "knownRansomwareCampaignUse": "Known",
  "notes": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dll-F26WwJW; https://nvd.nist.gov/vuln/detail/CVE-2020-3433",
  "product": "AnyConnect Secure",
  "requiredAction": "Apply updates per vendor instructions.",
  "severity": "HIGH",
  "source": "cisa_known_exploited",
  "title": "Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability",
  "vendor": "Cisco"
}

cve-2020-3433

Raw JSON Data