SB2021050620 - Multiple vulnerabilities in Cisco AnyConnect Secure Mobility Client

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2021050620

SB2021050620 - Multiple vulnerabilities in Cisco AnyConnect Secure Mobility Client

Published: May 6, 2021

Security Bulletin ID SB2021050620
Severity
Low
Patch available
YES
Number of vulnerabilities 3
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 3 secuirty vulnerabilities.


1) Creation of Temporary File With Insecure Permissions (CVE-ID: CVE-2021-1426)

The vulnerability allows a local user to perform an executable hijacking attack.

The vulnerability exists due to a temporary file with insecure permissions is created during the uninstall process. A local user can overwrite the temporary file before it is accessed for execution and execute arbitrary code on the target device.


2) Insecure DLL loading (CVE-ID: CVE-2021-1427)

The vulnerability allows a local user to compromise vulnerable system.

The vulnerability exists due to the application loads a DLL file from a user-writable directory. A local user can place a specially crafted .dll file and execute arbitrary code on victim's system.


3) Insecure DLL loading (CVE-ID: CVE-2021-1430)

The vulnerability allows a local user to compromise vulnerable system.

The vulnerability exists due to a temporary file with insecure permissions is created during the upgrade process. A local user can place a specially crafted .dll file and execute arbitrary code on victim's system.


Remediation

Install update from vendor's website.

References