Threat intelligence / Vulnerability
CVE-2020-3433
Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges.
Vulnerability
TypeVulnerability
External ID—
First seen2022-10-24
Last seen2022-10-24
Confidence
—
Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges.
Labels
CISA KEV context
Vendor / productCisco AnyConnect Secure
Added2022-10-24
Due date2022-11-14
3 recorded
Relationships
2 external