Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2020-3432— Cisco AnyConnect Secure Mobility Client for Mac OS File Corruption Vulnerability

Quick assessment

Affected
Cisco Cisco Secure Client
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Cisco AnyConnect Secure Mobility Client for Mac OS是美国思科（Cisco）公司的一款基于Mac OS平台的可通过任何设备安全访问网络和应用的安全移动客户端。 基于Mac OS平台的Cisco AnyConnect Secure Mobility Client 4.9.00086之前版本中的卸载程序组件存在后置链接漏洞，该漏洞源于程序未正确处理目录路径。攻击者可通过在特定路径上创建指向目标文件的符号链接利用该漏洞破坏文件的内容，进而导致拒绝服务。

AI Predicted 7.8 Difficulty: Easy EPSS 0.23% · P12
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-3432

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cisco AnyConnect Secure Mobility Client for Mac OS File Corruption Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authenticated, local attacker to corrupt the content of any file in the filesystem. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a symbolic link (symlink) to a target file on a specific path. A successful exploit could allow the attacker to corrupt the contents of the file. If the file is a critical systems file, the exploit could lead to a denial of service condition. To exploit this vulnerability, the attacker would need to have valid credentials on the system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco AnyConnect Secure Mobility Client for Mac OS 后置链接漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco AnyConnect Secure Mobility Client for Mac OS是美国思科（Cisco）公司的一款基于Mac OS平台的可通过任何设备安全访问网络和应用的安全移动客户端。 基于Mac OS平台的Cisco AnyConnect Secure Mobility Client 4.9.00086之前版本中的卸载程序组件存在后置链接漏洞，该漏洞源于程序未正确处理目录路径。攻击者可通过在特定路径上创建指向目标文件的符号链接利用该漏洞破坏文件的内容，进而导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Cisco Cisco Secure Client N/A -

II. Public POCs for CVE-2020-3432

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-3432

请登录查看更多情报信息。

Vendor Advisories for CVE-2020-3432 (1)

IV. Related Vulnerabilities

Same product: Cisco Secure Client
Same vendor: Cisco
Same weakness: CWE-59

V. Comments for CVE-2020-3432

No comments yet

Leave a comment