Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

9 records in Secure Client · all components

Priority MEDIUM 44

A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated, local attacker to ele…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.05374 Published 2023-06-28 No fix listed CWE-276
Priority LOW 36

A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate privileges on an affected device.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00888 Published 2024-03-06 No fix listed CWE-427
Priority LOW 35

A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewa…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00176 Published 2025-03-05 No fix listed CWE-347
Priority LOW 32

A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00347 Published 2024-05-15 No fix listed CWE-306
TI-2024-13398 CVE-2024-20474 · GHSA-f5rp-4vg3-xcrx

Integer underflow in Cisco Secure Client

Priority LOW 30

A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00623 Published 2024-10-23 No fix listed CWE-191
TI-2023-06945 CVE-2023-20241 · GHSA-23qx-pfmx-49j9

Out-of-bounds read in Cisco Secure Client

Priority LOW 24

Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00197 Published 2023-11-22 No fix listed CWE-125
TI-2023-06944 CVE-2023-20240 · GHSA-qwhq-2jqj-q642

Out-of-bounds read in Cisco Secure Client

Priority LOW 24

Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00197 Published 2023-11-22 No fix listed CWE-125
Open these records in search →