AEGLIX vulnerability intelligence
CVE-2020-3153
MEDIUM · CVSS 6.5 · Analyzed
Published: 2020-02-19 · Updated: 2026-08-12 · Source: NVD
Vulnerability overview
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks. To exploit this vulnerability, the attacker needs valid credentials on the Windows system.
Severity and scoring
- CVSS score
- 6.5 · MEDIUM
- CVSS version
- 3.1
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
- Weaknesses
- CWE-427
CVSS measures technical severity; it does not establish whether this vulnerability is being exploited in your environment.
Known exploitation and remediation
Listed in CISA’s Known Exploited Vulnerabilities catalog.
- Affected product
- Cisco · AnyConnect Secure
- Added to catalog
- 2022-10-24
- Required action
- Apply updates per vendor instructions.
- CISA remediation due date
- 2022-11-14
CISA deadlines apply to the organizations covered by its directives. Confirm your own remediation requirements.
Verify affected versions and patch availability in the vendor advisory before making changes.
Affected products and versions
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:windows:*:*
Before (exclusive): 4.8.02042
These are NVD CPE applicability entries. Some products depend on configuration conditions; consult the official record to confirm applicability.
Advisories and references
- http://packetstormsecurity.com/files/157340/Cisco-AnyConnect-Secure-Mobility-Client-4.8.01090-Privilege-Escalation.html
Exploit · Third Party Advisory · VDB Entry
- http://packetstormsecurity.com/files/158219/Cisco-AnyConnect-Path-Traversal-Privilege-Escalation.html
Exploit · Third Party Advisory · VDB Entry
- http://packetstormsecurity.com/files/159420/Cisco-AnyConnect-Privilege-Escalation.html
Exploit · Third Party Advisory · VDB Entry
- http://seclists.org/fulldisclosure/2020/Apr/43
Exploit · Mailing List · Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ac-win-path-traverse-qO4HWBsj
Vendor Advisory
- http://packetstormsecurity.com/files/157340/Cisco-AnyConnect-Secure-Mobility-Client-4.8.01090-Privilege-Escalation.html
Exploit · Third Party Advisory · VDB Entry
- http://packetstormsecurity.com/files/158219/Cisco-AnyConnect-Path-Traversal-Privilege-Escalation.html
Exploit · Third Party Advisory · VDB Entry
- http://packetstormsecurity.com/files/159420/Cisco-AnyConnect-Privilege-Escalation.html
Exploit · Third Party Advisory · VDB Entry
- http://seclists.org/fulldisclosure/2020/Apr/43
Exploit · Mailing List · Third Party Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ac-win-path-traverse-qO4HWBsj
Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-3153
US Government Resource