CVE-2019-1853: falha de média gravidade em Cisco AnyConnect Secure Mobility Client
Cisco AnyConnect Secure Mobility Client for Linux Out-of-Bounds Memory Read Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8epss 1.6%
A vulnerability in the HostScan component of Cisco AnyConnect Secure Mobility Client for Linux could allow an unauthenticated, remote attacker to read sensitive information on an affected system. The vulnerability exists because the affected software performs improper bounds checks. An attacker could exploit this vulnerability by crafting HTTP traffic for the affected component to download and process. A successful exploit could allow the attacker to read sensitive information on the affected system.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
Produtos afetados
Cisco · Cisco AnyConnect Secure Mobility ClientCVEs relacionadas — Cisco AnyConnect Secure Mobility Client
No mesmo produto, das mais perigosas para as menos.
CVE-2020-3153MEDIUMCisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path VulnerabilityEPSS 28.5%KEVCVE-2020-3433HIGHCisco AnyConnect Secure Mobility Client for Windows DLL Hijacking VulnerabilityEPSS 10.0%KEVCVE-2021-1366HIGHCisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking VulnerabilityEPSS 1.3%CVE-2021-1496HIGHCisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking VulnerabilitiesEPSS 0.5%CVE-2020-3434MEDIUMCisco AnyConnect Secure Mobility Client for Windows Denial of Service VulnerabilityEPSS 0.5%CVE-2020-3556HIGHCisco AnyConnect Secure Mobility Client Arbitrary Code Execution VulnerabilityEPSS 0.4%