Multiple vulnerabilities in Cisco AnyConnect Secure Mobility Client and Cisco Secure Client
| Risk | Medium |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2023-36672 CVE-2023-36673 |
| CWE-ID | CWE-200 |
| Exploitation vector | Local network |
| Public exploit | N/A |
| Vulnerable software |
Cisco Secure Client AnyConnect VPN for iOS Mobile applications / Apps for mobile phones Cisco AnyConnect Secure Mobility Client for Linux Other software / Other software solutions Cisco AnyConnect Secure Mobility Client for MacOS Other software / Other software solutions Cisco AnyConnect Secure Mobility Client for Windows Other software / Other software solutions Cisco Secure Client for Linux Other software / Other software solutions Cisco Secure Client for MacOS Other software / Other software solutions Cisco Secure Client for Windows Other software / Other software solutions |
| Vendor | Cisco Systems, Inc |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Information disclosure
EUVDB-ID: #VU79271
Risk: Medium
CVSSv4.0: 4.9 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-36672
CWE-ID:
CWE-200 - Exposure of sensitive information to an unauthorized actor
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to the affected application is vulnerable to LocalNet attacks. A remote attacker on the local network can manipulate routing exceptions and cause VPN clients to leak traffic outside the protected VPN tunnel.
MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco Secure Client AnyConnect VPN for iOS: All versions
Cisco AnyConnect Secure Mobility Client for Linux: All versions
Cisco AnyConnect Secure Mobility Client for MacOS: All versions
Cisco AnyConnect Secure Mobility Client for Windows: All versions
Cisco Secure Client for Linux: All versions
Cisco Secure Client for MacOS: All versions
Cisco Secure Client for Windows: All versions
CPE2.3- cpe:2.3:a:cisco_systems:cisco_secure_client_anyconnect_vpn_for_ios:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco_systems:cisco_anyconnect_secure_mobility_client_for_linux:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco_systems:cisco_anyconnect_secure_mobility_client_for_macos:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco_systems:cisco_anyconnect_secure_mobility_client_for_windows:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco_systems:cisco_secure_client_for_linux:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco_systems:cisco_secure_client_for_macos:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco_systems:cisco_secure_client_for_windows:*:*:*:*:*:*:*:*
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ac-leak-Sew6g2kd
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).
How the attacker can exploit this vulnerability?
The attacker would have to trick the victim to perform certain actions on the device.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Information disclosure
EUVDB-ID: #VU79273
Risk: Medium
CVSSv4.0: 4.9 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]
CVE-ID: CVE-2023-36673
CWE-ID:
CWE-200 - Exposure of sensitive information to an unauthorized actor
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to the affected application is vulnerable to ServerIP attacks. A remote attacker on the local network can manipulate routing exceptions and cause VPN clients to leak traffic outside the protected VPN tunnel.
MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco Secure Client AnyConnect VPN for iOS: All versions
Cisco AnyConnect Secure Mobility Client for Linux: All versions
Cisco AnyConnect Secure Mobility Client for MacOS: All versions
Cisco AnyConnect Secure Mobility Client for Windows: All versions
Cisco Secure Client for Linux: All versions
Cisco Secure Client for MacOS: All versions
Cisco Secure Client for Windows: All versions
CPE2.3- cpe:2.3:a:cisco_systems:cisco_secure_client_anyconnect_vpn_for_ios:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco_systems:cisco_anyconnect_secure_mobility_client_for_linux:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco_systems:cisco_anyconnect_secure_mobility_client_for_macos:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco_systems:cisco_anyconnect_secure_mobility_client_for_windows:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco_systems:cisco_secure_client_for_linux:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco_systems:cisco_secure_client_for_macos:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco_systems:cisco_secure_client_for_windows:*:*:*:*:*:*:*:*
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ac-leak-Sew6g2kd
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).
How the attacker can exploit this vulnerability?
The attacker would have to trick the victim to perform certain actions on the device.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
