Improper input validation in Cisco AnyConnect Secure Mobility Client unknown
Priority LOW 25CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
A vulnerability in vpnva-6.sys for 32-bit Windows and vpnva64-6.sys for 64-bit Windows of Cisco AnyConnect Secure Mobility Client for Windows Desktop could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. The vulnerability is due to improper validation of user-supplied data. An attacker could exploit this vulnerability by sending a malicious request to the application. A successful exploit could allow the attacker to cause a DoS condition on the affected system. Cisco Bug IDs: CSCvj47654.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00386 32nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Cisco AnyConnect Secure Mobility Client unknown | Cisco AnyConnect Secure Mobility Client unknown | — | No fix listed | CNA |
- Cisco AnyConnect Secure Mobility Client unknown Vendor— Affected Cisco AnyConnect Secure Mobility Client unknown Fixed in — No fix listed CNA
CPE configurations NVD · 10
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(58\):*:*:*:*:*:*:* | 4.5(58) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(1044\):*:*:*:*:*:*:* | 4.5(1044) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(2033\):*:*:*:*:*:*:* | 4.5(2033) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(2036\):*:*:*:*:*:*:* | 4.5(2036) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(3040\):*:*:*:*:*:*:* | 4.5(3040) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(4029\):*:*:*:*:*:*:* | 4.5(4029) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(5030\):*:*:*:*:*:*:* | 4.5(5030) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.6\(362\):*:*:*:*:*:*:* | 4.6(362) | Vulnerable | Cisco |
| cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.6\(1098\):*:*:*:*:*:*:* | 4.6(1098) | Vulnerable | Cisco |
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(58\):*:*:*:*:*:*:* Versions 4.5(58) Vulnerable ·Cisco
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(1044\):*:*:*:*:*:*:* Versions 4.5(1044) Vulnerable ·Cisco
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(2033\):*:*:*:*:*:*:* Versions 4.5(2033) Vulnerable ·Cisco
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(2036\):*:*:*:*:*:*:* Versions 4.5(2036) Vulnerable ·Cisco
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(3040\):*:*:*:*:*:*:* Versions 4.5(3040) Vulnerable ·Cisco
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(4029\):*:*:*:*:*:*:* Versions 4.5(4029) Vulnerable ·Cisco
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.5\(5030\):*:*:*:*:*:*:* Versions 4.5(5030) Vulnerable ·Cisco
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.6\(362\):*:*:*:*:*:*:* Versions 4.6(362) Vulnerable ·Cisco
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.6\(1098\):*:*:*:*:*:*:* Versions 4.6(1098) Vulnerable ·Cisco
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2018-0373
- 2026-10-03 Alias added: GHSA-c67c-4f8w-x4cx
References
More Cisco Anyconnect Secure Mobility Client vulnerabilities
- TI-2020-02982 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability KEVCVSS 3.1HIGH 7.8
- TI-2020-02715 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability KEVCVSS 3.1MEDIUM 6.5
- TI-2011-01789 The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect… CVSS 2.0HIGH 7.6
- TI-2011-01790 The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect… CVSS 2.0HIGH 9.3
- TI-2012-02179 The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure… CVSS 2.0HIGH 9.3
- TI-2023-06884 Incorrect default permissions in Cisco Secure Client CVSS 3.1HIGH 7.8
Sources
- CVE-2018-0373 · CVE Program
- CVE-2018-0373 · NVD
- FIRST EPSS
- GHSA-c67c-4f8w-x4cx · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences