Known vulnerabilities in Cisco AnyConnect Secure Mobility Client

Software CPE: cpe:2.3:a:cisco_systems:cisco_anyconnect_secure_mobility_client:*:*:*:*:*:*:*:*
Total vulnerabilities: 33
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco AnyConnect Secure Mobility Client Cisco AnyConnect Secure Mobility Client is affected by 33 known vulnerabilities: 33 low Critical High Medium Low

Vulnerabilities (33)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83236 - Out-of-bounds read
CVE-2023-20241
CWE-125 Low
No
No
4.10 MR8, 5.0 MR4 5.0.04032, 5.0 MR5 17.11.2023 SB2023111719
#VU83235 - Out-of-bounds read
CVE-2023-20240
CWE-125 Low
No
No
4.10 MR8, 5.0 MR4 5.0.04032, 5.0 MR5 17.11.2023 SB2023111719
#VU77088 - Permissions, Privileges, and Access Controls
CVE-2023-20178
CWE-264 Low
Available
No
4.10MR7 08.06.2023 SB2023060815
#VU57951 - Incorrect Privilege Assignment
CVE-2021-40124
CWE-266 Low
No
No
4.10.03104 04.11.2021 SB2021110409
#VU57124 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-34788
CWE-367 Low
No
No
4.10.03104 07.10.2021 SB2021100716
#VU54178 - Uncontrolled Memory Allocation
CVE-2021-1568
CWE-789 Low
No
No
4.10.01075 16.06.2021 SB2021061623
#VU54177 - Uncontrolled Search Path Element
CVE-2021-1567
CWE-427 Low
No
No
4.10.01075 16.06.2021 SB2021061623
#VU52928 - Improper input validation
CVE-2021-1519
CWE-20 Low
No
No
4.10.00093 06.05.2021 SB2021050617
#VU52921 - Creation of Temporary File With Insecure Permissions
CVE-2021-1496
CWE-378 Low
No
No
4.9.03022 06.05.2021 SB2021050621
#VU52920 - Uncontrolled Search Path Element
CVE-2021-1430
CWE-427 Low
No
No
4.9.06037 06.05.2021 SB2021050620
#VU52917 - Creation of Temporary File With Insecure Permissions
CVE-2021-1429
CWE-378 Low
No
No
4.10.00093 06.05.2021 SB2021050617
#VU52916 - Uncontrolled Search Path Element
CVE-2021-1428
CWE-427 Low
No
No
4.10.00093 06.05.2021 SB2021050617
#VU52914 - Uncontrolled Search Path Element
CVE-2021-1427
CWE-427 Low
No
No
4.9.06037 06.05.2021 SB2021050620
#VU52911 - Creation of Temporary File With Insecure Permissions
CVE-2021-1426
CWE-378 Low
No
No
4.9.06037 06.05.2021 SB2021050620
#VU50934 - Improper input validation
CVE-2021-1450
CWE-20 Low
No
No
4.9.06037 24.02.2021 SB2021022423
#VU50785 - Uncontrolled Search Path Element
CVE-2021-1366
CWE-427 Low
No
No
4.9.05042 17.02.2021 SB2021021725
#VU49533 - Uncontrolled Search Path Element
CVE-2021-1237
CWE-427 Low
No
No
4.9.04043 13.01.2021 SB2021011408
#VU49540 - Permissions, Privileges, and Access Controls
CVE-2021-1258
CWE-264 Low
No
No
4.9.03047, 4.9.03049 13.01.2021 SB2021011409
#VU48150 - Exposed Dangerous Method or Function
CVE-2020-27123
CWE-749 Low
No
No
4.9.03047 05.11.2020 SB2020110532
#VU48149 - Improper input validation
CVE-2020-3556
CWE-20 Low
No
No
- 05.11.2020 SB2020110531


Showing elements 1 - 20 out of 33