Cisco Anyconnect Secure Mobility Client Vulnerabilità

Sequenza temporale

L'anno scorso

Versione

3.0.070593
4.0(2049)2
4.0(48)2
2.2.1352
4.4.20331

Contromisure

Official Fix60
Temporary Fix0
Workaround1
Unavailable2
Not Defined4

Sfruttabilità

High1
Functional1
Proof-of-Concept9
Unproven10
Not Defined46

Accesso al vettore

Not Defined0
Physical1
Local39
Adjacent2
Network25

Autenticazione

Not Defined0
High0
Low46
None21

Interazione dell'utente

Not Defined0
Required2
None65

C3BM Index

L'anno scorso

CVSSv3 Base

≤10
≤20
≤30
≤43
≤58
≤620
≤77
≤820
≤94
≤105

CVSSv3 Temp

≤10
≤20
≤30
≤44
≤515
≤615
≤78
≤818
≤94
≤103

VulDB

≤10
≤20
≤31
≤45
≤54
≤625
≤78
≤814
≤95
≤105

NVD

≤10
≤20
≤30
≤40
≤52
≤69
≤74
≤817
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤51
≤60
≤73
≤81
≤90
≤100

Fornitore

≤10
≤20
≤30
≤40
≤50
≤60
≤71
≤81
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 giorni

<1k1
<2k1
<5k6
<10k22
<25k30
<50k7
<100k0
≥100k0

Exploiter aujourd'hui

<1k59
<2k2
<5k4
<10k2
<25k0
<50k0
<100k0
≥100k0

Sfrutta il volume del mercato

L'anno scorso

🔴 CTI Attività

Affected Versions (20): 2.0, 2.1, 2.2.135, 2.4.201, 3.0, 3.0.07059, 3.0.08066, 3.0.508, 3.1(.02043), 3.1(0), 3.1(60), 4.0(0), 4.0(48), 4.0(2049), 4.1(0), 4.1(8), 4.2, 4.3, 4.3.04027, 4.4.2033

Link to Product Website: https://www.cisco.com/

Tipo di software: Network Encryption Software

Data di pubblicazioneBaseTempVulnerabilità0dayOggiSfrConCTICVE
08/08/20236.46.3Cisco AnyConnect Secure Mobility Client escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.06CVE-2023-36673
08/08/20235.65.5Cisco AnyConnect Secure Mobility Client Routing Table escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-36672
08/06/20237.87.4Cisco AnyConnect Secure Mobility Client escalazione di privilegi$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.02CVE-2023-20178
04/11/20217.87.6Cisco AnyConnect Secure Mobility Client Network Access Manager escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2021-40124
07/10/20217.06.8Cisco AnyConnect Secure Mobility Client Interprocess Communication race condition$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-34788
17/06/20214.34.1Cisco AnyConnect Secure Mobility Client VPN Agent Service denial of service$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1568
17/06/20217.57.2Cisco AnyConnect Secure Mobility Client Interprocess Communication race condition$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1567
06/05/20214.03.8Cisco AnyConnect Secure Mobility Client Interprocess Communication escalazione di privilegi$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1519
06/05/20217.47.1Cisco AnyConnect Secure Mobility Client escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1496
06/05/20217.47.1Cisco AnyConnect Secure Mobility Client escalazione di privilegi$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1430

57 non vengono visualizzate più voci

altre voci di Cisco

Interested in the pricing of exploits?

See the underground prices here!