Improper Verification of Cryptographic Signature in Cisco Secure Client for Windows - CVE-2025-20206

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU105375

Improper Verification of Cryptographic Signature in Cisco Secure Client for Windows - CVE-2025-20206

Published: March 6, 2025


Vulnerability identifier: #VU105375
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-20206
CWE-ID: CWE-347
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to compromise the target system.

The vulnerability exists due to insufficient validation of resources that are loaded by the application at run time within the interprocess communication (IPC) channel. A local user can send a specially crafted IPC message and execute arbitrary code on the system.


Affected software

Cisco Secure Client for Windows

How to mitigate CVE-2025-20206

Install updates from vendor's website.

Cisco Secure Client for Windows - update to 5.1.8.105

External References

Related Security Bulletins