CVE-2021-1568— Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability
Quick assessment
Affected
Cisco Cisco AnyConnect Secure Mobility Client
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco AnyConnect Secure Mobility Client for Windows是美国思科（Cisco）公司的一款基于Windows平台的可通过任何设备安全访问网络和应用的安全移动客户端。 Cisco AnyConnect Secure Mobility Client 在Windows上存在安全漏洞，该漏洞源于不受控制的内存分配。该漏洞允许经过身份验证的本地攻击者通过将精心制作的文件复制到系统上的特定文件夹让受影响的应用程序启动时的VPN代理服务崩溃，导致系统的所有用户都无法使用该服
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1496 · Resource Hijacking
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-1568
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco AnyConnect Secure Mobility Client for Windows Denial of Service Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to uncontrolled memory allocation. An attacker could exploit this vulnerability by copying a crafted file to a specific folder on the system. A successful exploit could allow the attacker to crash the VPN Agent service when the affected application is launched, causing it to be unavailable to all users of the system. To exploit this vulnerability, the attacker must have valid credentials on a multiuser Windows system.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
未经控制的内存分配
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco AnyConnect Secure Mobility Client 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco AnyConnect Secure Mobility Client for Windows是美国思科（Cisco）公司的一款基于Windows平台的可通过任何设备安全访问网络和应用的安全移动客户端。 Cisco AnyConnect Secure Mobility Client 在Windows上存在安全漏洞，该漏洞源于不受控制的内存分配。该漏洞允许经过身份验证的本地攻击者通过将精心制作的文件复制到系统上的特定文件夹让受影响的应用程序启动时的VPN代理服务崩溃，导致系统的所有用户都无法使用该服
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco AnyConnect Secure Mobility Client | n/a | - |
|
II. Public POCs for CVE-2021-1568
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-1568
请登录查看更多情报信息。
Vendor Advisories for CVE-2021-1568 (1)
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dos-hMhyDfb8 vendor-advisory x_refsource_CISCO
Same Patch Batch · Cisco · 2021-06-16 · 11 CVEs total
| CVE-2021-1566 | 7.4 HIGH | Cisco Email Security Appliance and Cisco Web Security Appliance Certificate Validation Vul |
| CVE-2021-1542 | 7.2 HIGH | Cisco Small Business 220 Series Smart Switches Vulnerabilities |
| CVE-2021-1543 | 7.2 HIGH | Cisco Small Business 220 Series Smart Switches Vulnerabilities |
| CVE-2021-1571 | 7.2 HIGH | Cisco Small Business 220 Series Smart Switches Vulnerabilities |
| CVE-2021-1541 | 7.2 HIGH | Cisco Small Business 220 Series Smart Switches Vulnerabilities |
| CVE-2021-1567 | 7.0 HIGH | Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL |
| CVE-2021-1569 | 6.5 MEDIUM | Cisco Jabber Desktop and Mobile Client Software Vulnerabilities |
| CVE-2021-1570 | 6.5 MEDIUM | Cisco Jabber Desktop and Mobile Client Software Vulnerabilities |
| CVE-2021-1395 | 4.7 MEDIUM | Cisco Unified Intelligence Center Reflected Cross-Site Scripting Vulnerability |
| CVE-2021-1524 | 4.3 MEDIUM | Cisco Meeting Server API Denial of Service Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco AnyConnect Secure Mobility Client
-
CVE-2021-40124
Cisco AnyConnect Secure Mobility Client for Windows with Net -
CVE-2021-34788
Cisco AnyConnect Secure Mobility Client for Linux and Mac OS -
CVE-2021-1567
Cisco AnyConnect Secure Mobility Client for Windows with VPN -
CVE-2021-1519
Cisco AnyConnect Secure Mobility Client Profile Modification -
CVE-2021-1426
Cisco AnyConnect Secure Mobility Client for Windows DLL and
Same vendor: Cisco
-
CVE-2026-20320
Cisco BroadWorks OCI解析器XEE漏洞 -
CVE-2026-20327
Cisco Unified Intelligence Center SQL Injection Vulnerabilit -
CVE-2026-20314
Cisco Packaged Contact Center Enterprise & Cisco Unified Con -
CVE-2026-20319
Cisco Secure Workload Software Security Hardening Release Au -
CVE-2026-20315
Cisco Secure Workload Software Security Hardening Release Au
Same weakness: CWE-789
-
CVE-2026-44253
Wazuh: Cluster Protocol Memory Exhaustion (DoS) via unbounde -
CVE-2026-75935
Memory-amplification denial of service via declared-length p -
CVE-2026-69219
RabbitMQ Java client ValueReader: Oversized LongString/bytes -
CVE-2026-72639
Memory Allocation with Excessive Size Value in Elasticsearch -
CVE-2026-72645
Memory Allocation with Excessive Size Value in Elasticsearch
V. Comments for CVE-2021-1568
No comments yet