CVE-2023-20178
Quick assessment
Affected
Cisco Cisco Secure Client
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco AnyConnect Secure Mobility Client for Windows是美国思科（Cisco）公司的一款基于Windows平台的可通过任何设备安全访问网络和应用的安全移动客户端。 Cisco AnyConnect Secure Mobility Client Software for Windows和Secure Client Software for Windows存在安全漏洞，该漏洞源于允许经过身份验证的低权限攻击者将权限提升至 SYSTEM权限。
Possible ATT&CK Techniques 1 AI
T1134 · Access Token ManipulationAffected Version Matrix 24
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco Secure Client | 4.9.00086 |
affected |
4.9.01095 |
affected | ||
4.9.02028 |
affected | ||
4.9.03047 |
affected | ||
4.9.03049 |
affected | ||
4.9.04043 |
affected | ||
4.9.04053 |
affected | ||
4.9.05042 |
affected | ||
| … +16 more rows | |||
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-20178
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to elevate privileges to those of SYSTEM. The client update process is executed after a successful VPN connection is established.
This vulnerability exists because improper permissions are assigned to a temporary directory that is created during the update process. An attacker could exploit this vulnerability by abusing a specific function of the Windows installer process. A successful exploit could allow the attacker to execute code with SYSTEM privileges.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
缺省权限不正确
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco AnyConnect Secure Mobility Client for Windows 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco AnyConnect Secure Mobility Client for Windows是美国思科（Cisco）公司的一款基于Windows平台的可通过任何设备安全访问网络和应用的安全移动客户端。 Cisco AnyConnect Secure Mobility Client Software for Windows和Secure Client Software for Windows存在安全漏洞，该漏洞源于允许经过身份验证的低权限攻击者将权限提升至 SYSTEM权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Secure Client | 4.9.00086 | - |
|
II. Public POCs for CVE-2023-20178
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | None | https://github.com/Wh04m1001/CVE-2023-20178 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-20178
请登录查看更多情报信息。
Vendor Advisories for CVE-2023-20178 (1)
Same Patch Batch · Cisco · 2023-06-28 · 12 CVEs total
| CVE-2023-20192 | 9.6 CRITICAL | Cisco Expressway Series and Cisco TelePresence Video Communication Server Privilege Escala |
| CVE-2023-20105 | 9.6 CRITICAL | 多款Cisco产品 安全漏洞 |
| CVE-2023-20006 | 8.6 HIGH | 多款Cisco产品 安全漏洞 |
| CVE-2023-20108 | 7.5 HIGH | Cisco Unified Communications Manager 安全漏洞 |
| CVE-2023-20116 | 6.8 MEDIUM | Cisco Unified Communications Manager 安全漏洞 |
| CVE-2023-20199 | 6.2 MEDIUM | Cisco Duo Two-Factor Authentication for macOS Authentication Bypass Vulnerability |
| CVE-2023-20119 | 6.1 MEDIUM | 多款Cisco产品 跨站脚本漏洞 |
| CVE-2023-20120 | 5.4 MEDIUM | Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appli |
| CVE-2023-20028 | 5.4 MEDIUM | Cisco Secure Email Gateway, Cisco Secure Email and Web Manager, and Cisco Secure Web Appli |
| CVE-2023-20188 | 4.8 MEDIUM | 多款Cisco产品 跨站脚本漏洞 |
| CVE-2023-20136 | 4.3 MEDIUM | Cisco Secure Workload 安全漏洞 |
IV. Related Vulnerabilities
Same product: Cisco Secure Client
Same vendor: Cisco
-
CVE-2026-76472
Cisco Meraki Security Hardening Release October 2026 - Impro -
CVE-2026-76467
Cisco Meraki Software Hardening Release - Resource Lifetime -
CVE-2026-76470
Cisco Meraki Hardening Release - Incorrect Calculation Vulne -
CVE-2026-76469
Cisco Meraki Security Hardening Release: October 2026 Insuff -
CVE-2026-76468
Cisco Meraki Hardening Release - Input Validation Vulnerabil
Same weakness: CWE-276
-
CVE-2026-107332
Insecure Default File Permissions on Cached Credentials in A -
CVE-2026-107573
Incorrect Default Permissions in hMailServer -
CVE-2026-78413
Velociraptor privilege escalation via SysmonLogForward clien -
CVE-2026-100718
Froxlor before 2.3.12 Authentication Bypass via EmailSender. -
CVE-2026-6718
Multiple Vulnerabilities in IBM Concert Software
V. Comments for CVE-2023-20178
No comments yet