Read the docs
TI-2024-13398 Aliases CVE-2024-20474GHSA-f5rp-4vg3-xcrx

Integer underflow in Cisco Secure Client

Priority LOW 30CWE-191Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-191 and the CVSS impact.

Summary

A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco Secure Client. This vulnerability is due to an integer underflow condition. An attacker could exploit this vulnerability by sending a crafted IKEv2 packet to an affected system. A successful exploit could allow the attacker to cause Cisco Secure Client Software to crash, resulting in a DoS condition on the client software. Note: Cisco Secure Client Software releases 4.10 and earlier were known as Cisco AnyConnect Secure Mobility Client.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00623 50th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco Secure Client4.9.00086; 4.9.01095; 4.9.02028; 4.9.03047; 4.9.03049; 4.9.04043; 4.9.04053; 4.9.05042; 4.9.06037; 4.10.00093; 4.10.01075; 4.10.02086; 4.10.03104; 4.10.04065; 4.10.04071; 4.10.05085; 4.10.05095; 4.10.05111; 4.10.06079; 4.10.06090; 4.10.07061; 4.10.07062; 4.10.07073; 4.10.08025; 4.10.08029; 5.0.00238; 5.0.00529; 5.0.00556; 5.0.01242; 5.0.02075; 5.0.03072; 5.0.03076; 5.0.04032; 5.0.05040; 5.1.0.136; 5.1.1.42; 5.1.2.42; 5.1.3.62—No fix listedCNA
  • Cisco Secure Client VendorCisco Affected 4.9.00086; 4.9.01095; 4.9.02028; 4.9.03047; 4.9.03049; 4.9.04043; 4.9.04053; 4.9.05042; 4.9.06037; 4.10.00093; 4.10.01075; 4.10.02086; 4.10.03104; 4.10.04065; 4.10.04071; 4.10.05085; 4.10.05095; 4.10.05111; 4.10.06079; 4.10.06090; 4.10.07061; 4.10.07062; 4.10.07073; 4.10.08025; 4.10.08029; 5.0.00238; 5.0.00529; 5.0.00556; 5.0.01242; 5.0.02075; 5.0.03072; 5.0.03076; 5.0.04032; 5.0.05040; 5.1.0.136; 5.1.1.42; 5.1.2.42; 5.1.3.62 Fixed in — No fix listed CNA

CPE configurations NVD · 38

CPEVersionsRoleVendor
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.00086:*:*:*:*:*:*:*4.9.00086VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.01095:*:*:*:*:*:*:*4.9.01095VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.02028:*:*:*:*:*:*:*4.9.02028VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.03047:*:*:*:*:*:*:*4.9.03047VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.03049:*:*:*:*:*:*:*4.9.03049VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.04043:*:*:*:*:*:*:*4.9.04043VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.04053:*:*:*:*:*:*:*4.9.04053VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.05042:*:*:*:*:*:*:*4.9.05042VulnerableCisco
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.06037:*:*:*:*:*:*:*4.9.06037VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.00093:*:*:*:*:*:*:*4.10.00093VulnerableCisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.00086:*:*:*:*:*:*:* Versions 4.9.00086 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.01095:*:*:*:*:*:*:* Versions 4.9.01095 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.02028:*:*:*:*:*:*:* Versions 4.9.02028 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.03047:*:*:*:*:*:*:* Versions 4.9.03047 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.03049:*:*:*:*:*:*:* Versions 4.9.03049 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.04043:*:*:*:*:*:*:* Versions 4.9.04043 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.04053:*:*:*:*:*:*:* Versions 4.9.04053 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.05042:*:*:*:*:*:*:* Versions 4.9.05042 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.06037:*:*:*:*:*:*:* Versions 4.9.06037 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.00093:*:*:*:*:*:*:* Versions 4.10.00093 Vulnerable ·Cisco
Show 28 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:secure_client:4.10.01075:*:*:*:*:*:*:*4.10.01075VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.02086:*:*:*:*:*:*:*4.10.02086VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.03104:*:*:*:*:*:*:*4.10.03104VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.04065:*:*:*:*:*:*:*4.10.04065VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.04071:*:*:*:*:*:*:*4.10.04071VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.05085:*:*:*:*:*:*:*4.10.05085VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.05095:*:*:*:*:*:*:*4.10.05095VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.05111:*:*:*:*:*:*:*4.10.05111VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.06079:*:*:*:*:*:*:*4.10.06079VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.06090:*:*:*:*:*:*:*4.10.06090VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.07061:*:*:*:*:*:*:*4.10.07061VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.07062:*:*:*:*:*:*:*4.10.07062VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.07073:*:*:*:*:*:*:*4.10.07073VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.08025:*:*:*:*:*:*:*4.10.08025VulnerableCisco
cpe:2.3:a:cisco:secure_client:4.10.08029:*:*:*:*:*:*:*4.10.08029VulnerableCisco
cpe:2.3:a:cisco:secure_client:5.0.00238:*:*:*:*:*:*:*5.0.00238VulnerableCisco
cpe:2.3:a:cisco:secure_client:5.0.00529:*:*:*:*:*:*:*5.0.00529VulnerableCisco
cpe:2.3:a:cisco:secure_client:5.0.00556:*:*:*:*:*:*:*5.0.00556VulnerableCisco
cpe:2.3:a:cisco:secure_client:5.0.01242:*:*:*:*:*:*:*5.0.01242VulnerableCisco
cpe:2.3:a:cisco:secure_client:5.0.02075:*:*:*:*:*:*:*5.0.02075VulnerableCisco
cpe:2.3:a:cisco:secure_client:5.0.03072:*:*:*:*:*:*:*5.0.03072VulnerableCisco
cpe:2.3:a:cisco:secure_client:5.0.03076:*:*:*:*:*:*:*5.0.03076VulnerableCisco
cpe:2.3:a:cisco:secure_client:5.0.04032:*:*:*:*:*:*:*5.0.04032VulnerableCisco
cpe:2.3:a:cisco:secure_client:5.0.05040:*:*:*:*:*:*:*5.0.05040VulnerableCisco
cpe:2.3:a:cisco:secure_client:5.1.0.136:*:*:*:*:*:*:*5.1.0.136VulnerableCisco
cpe:2.3:a:cisco:secure_client:5.1.1.42:*:*:*:*:*:*:*5.1.1.42VulnerableCisco
cpe:2.3:a:cisco:secure_client:5.1.2.42:*:*:*:*:*:*:*5.1.2.42VulnerableCisco
cpe:2.3:a:cisco:secure_client:5.1.3.62:*:*:*:*:*:*:*5.1.3.62VulnerableCisco
  • cpe:2.3:a:cisco:secure_client:4.10.01075:*:*:*:*:*:*:* Versions 4.10.01075 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.02086:*:*:*:*:*:*:* Versions 4.10.02086 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.03104:*:*:*:*:*:*:* Versions 4.10.03104 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.04065:*:*:*:*:*:*:* Versions 4.10.04065 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.04071:*:*:*:*:*:*:* Versions 4.10.04071 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.05085:*:*:*:*:*:*:* Versions 4.10.05085 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.05095:*:*:*:*:*:*:* Versions 4.10.05095 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.05111:*:*:*:*:*:*:* Versions 4.10.05111 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.06079:*:*:*:*:*:*:* Versions 4.10.06079 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.06090:*:*:*:*:*:*:* Versions 4.10.06090 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.07061:*:*:*:*:*:*:* Versions 4.10.07061 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.07062:*:*:*:*:*:*:* Versions 4.10.07062 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.07073:*:*:*:*:*:*:* Versions 4.10.07073 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.08025:*:*:*:*:*:*:* Versions 4.10.08025 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:4.10.08029:*:*:*:*:*:*:* Versions 4.10.08029 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:5.0.00238:*:*:*:*:*:*:* Versions 5.0.00238 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:5.0.00529:*:*:*:*:*:*:* Versions 5.0.00529 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:5.0.00556:*:*:*:*:*:*:* Versions 5.0.00556 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:5.0.01242:*:*:*:*:*:*:* Versions 5.0.01242 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:5.0.02075:*:*:*:*:*:*:* Versions 5.0.02075 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:5.0.03072:*:*:*:*:*:*:* Versions 5.0.03072 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:5.0.03076:*:*:*:*:*:*:* Versions 5.0.03076 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:5.0.04032:*:*:*:*:*:*:* Versions 5.0.04032 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:5.0.05040:*:*:*:*:*:*:* Versions 5.0.05040 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:5.1.0.136:*:*:*:*:*:*:* Versions 5.1.0.136 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:5.1.1.42:*:*:*:*:*:*:* Versions 5.1.1.42 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:5.1.2.42:*:*:*:*:*:*:* Versions 5.1.2.42 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:secure_client:5.1.3.62:*:*:*:*:*:*:* Versions 5.1.3.62 Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-20474
  2. 2026-10-03 Alias added: GHSA-f5rp-4vg3-xcrx
  3. 2026-11-05 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2020-02982 Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability KEVCVSS 3.1HIGH 7.8
  • TI-2020-02715 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability KEVCVSS 3.1MEDIUM 6.5
  • TI-2011-01789 The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect… CVSS 2.0HIGH 7.6
  • TI-2011-01790 The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect… CVSS 2.0HIGH 9.3
  • TI-2012-02179 The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure… CVSS 2.0HIGH 9.3
  • TI-2023-06884 Incorrect default permissions in Cisco Secure Client CVSS 3.1HIGH 7.8
See all 68 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences