Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2020-3153— Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

Quick assessment

Affected
Cisco Cisco AnyConnect Secure Mobility Client
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco AnyConnect Secure Mobility Client for Windows是美国思科（Cisco）公司的一款基于Windows平台的可通过任何设备安全访问网络和应用的安全移动客户端。 基于Windows平台的Cisco AnyConnect Secure Mobility Client 4.8.02042之前版本中的安装程序组件存在代码问题漏洞，该漏洞源于对目录路径的不正确处理。攻击者可利用该漏洞将恶意文件复制到系统层面的目录。

AI Predicted 7.8 Difficulty: Easy KEV · Ransomware EPSS 28.31% · P98

Public Exploits 1

Metasploit · 1 anyconnect_lpe.rb#CVE-2020-3153 [exploit]

Possible ATT&CK Techniques 2 AI

T1055 · Process Injection T1574.002

Affected Version Matrix 1

VendorProduct Version RangeStatus
Cisco Cisco AnyConnect Secure Mobility Client unspecified< n/a affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-3153

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks. To exploit this vulnerability, the attacker needs valid credentials on the Windows system.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
对搜索路径元素未加控制
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco AnyConnect Secure Mobility Client for Windows 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco AnyConnect Secure Mobility Client for Windows是美国思科（Cisco）公司的一款基于Windows平台的可通过任何设备安全访问网络和应用的安全移动客户端。 基于Windows平台的Cisco AnyConnect Secure Mobility Client 4.8.02042之前版本中的安装程序组件存在代码问题漏洞，该漏洞源于对目录路径的不正确处理。攻击者可利用该漏洞将恶意文件复制到系统层面的目录。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Cisco Cisco AnyConnect Secure Mobility Client unspecified ~ n/a -

II. Public POCs for CVE-2020-3153

# POC Description Source Link Shenlong Link
1 POC code for CVE-2020-3153 - Cisco anyconnect path traversal vulnerability https://github.com/shubham0d/CVE-2020-3153 POC Details
2 PoC for CVE-2020-3153 Cisco AnyConnect Secure Mobility Client EoP https://github.com/raspberry-pie/CVE-2020-3153 POC Details
3 Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal https://github.com/goichot/CVE-2020-3153 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-3153

请登录查看更多情报信息。

Vendor Advisories for CVE-2020-3153 (1)

Exploits & Public PoCs for CVE-2020-3153 (2)

Mailing List Discussions for CVE-2020-3153 (1)

Same Patch Batch · Cisco · 2020-02-19 · 15 CVEs total

CVE-2019-1950 8.4 HIGH Cisco IOS XE SD-WAN Software Default Credentials Vulnerability
CVE-2020-3156 6.1 MEDIUM Cisco Identity Services Engine Cross-Site Scripting Vulnerability
CVE-2015-0749 4.3 MEDIUM Cisco Unified Communications Manager Cross-Site Scripting Vulnerability
CVE-2011-2054 4.3 MEDIUM Cisco ASA Secondary Authentication Bypass Vulnerability
CVE-2020-3163 Cisco Unified Contact Center Enterprise Denial of Service Vulnerability
CVE-2020-3160 Cisco Meeting Server Extensible Messaging and Presence Protocol Denial of Service Vulnerab
CVE-2020-3159 Cisco Finesse Web-Based Management Interface Cross-Site Scripting Vulnerability
CVE-2020-3158 Cisco Smart Software Manager On-Prem Static Default Credential Vulnerability
CVE-2020-3154 Cisco Cloud Web Security SQL Injection Vulnerability
CVE-2020-3138 Cisco Enterprise NFV Infrastructure Software Remote Code Execution Vulnerability
CVE-2020-3132 Cisco Email Security Appliance Shortened URL Denial of Service Vulnerability
CVE-2020-3114 Cisco Data Center Network Manager Cross-Site Request Forgery Vulnerability
CVE-2020-3112 Cisco Data Center Network Manager Privilege Escalation Vulnerability
CVE-2020-3113 Cisco Data Center Network Manager Stored Cross-Site Scripting Vulnerability

IV. Related Vulnerabilities

Same product: Cisco AnyConnect Secure Mobility Client
Same vendor: Cisco
Same weakness: CWE-427

V. Comments for CVE-2020-3153

No comments yet

Leave a comment