CVE-2020-27123
Description
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to read arbitrary files on the underlying operating system of an affected device. The vulnerability is due to an exposed IPC function. An attacker could exploit this vulnerability by sending a crafted IPC message to the AnyConnect process on an affected device. A successful exploit could allow the attacker to read arbitrary files on the underlying operating system of the affected device.
How to fix
- cisco anyconnect_secure_mobility_client4.9.03047 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco anyconnect_secure_mobility_client | v < 4.9.03047 | 4.9.03047 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.