Cisco AnyConnect Secure Mobility Client vulnerabilities

69 CVEs affecting Cisco AnyConnect Secure Mobility Client, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-3432, published 2025-02-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3153: Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability, published 2020-02-19. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2022-10-24. EPSS: 28.3% chance of exploitation in the next 30 days. A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories…
CVE-2020-3433: Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability, published 2020-08-17. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2022-10-24. EPSS: 10% chance of exploitation in the next 30 days. A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack.…
CVE-2011-2039, published 2011-06-02. High severity, CVSS 7.6. EPSS: 70% chance of exploitation in the next 30 days. The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file…
CVE-2011-2040, published 2011-06-02. High severity, CVSS 9.3. EPSS: 10.7% chance of exploitation in the next 30 days. The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file…
CVE-2023-20178, published 2023-06-28. High severity, CVSS 7.8. EPSS: 5.4% chance of exploitation in the next 30 days. A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could allow a low-privileged, authenticated,…
CVE-2012-2493, published 2012-06-20. High severity, CVSS 9.3. EPSS: 3.9% chance of exploitation in the next 30 days. The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5 MR6 on Windows, and 2.x before 2.5 MR6 and 3.x before 3.0 MR8 on Mac OS X and…
CVE-2016-9192, published 2016-12-14. High severity, CVSS 7.8. EPSS: 3.5% chance of exploitation in the next 30 days. A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and execute an arbitrary executable file with privileges equivalent to…
CVE-2018-0229, published 2018-04-19. Medium severity, CVSS 6.5. EPSS: 3.4% chance of exploitation in the next 30 days. A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication for Cisco AnyConnect Secure Mobility Client for Desktop Platforms, Cisco…
CVE-2012-2496, published 2012-06-20. Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days. A certain Java applet in the VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 3.x before 3.0 MR7 on 64-bit Linux platforms does not properly restrict…
CVE-2013-5559, published 2013-11-04. Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days. Buffer overflow in the Active Template Library (ATL) framework in the VPNAPI COM module in Cisco AnyConnect Secure Mobility Client 2.x allows user-assisted remote attackers to execute arbitrary code…

Latest

CVE-2020-3432, published 2025-02-12. Medium severity, CVSS 5.6. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authenticated, local attacker to corrupt the content of any file in the…
CVE-2024-20474, published 2024-10-23. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) of Cisco…
CVE-2023-20241, published 2023-11-22. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an…
CVE-2023-20240, published 2023-11-22. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an…
CVE-2021-40124, published 2021-11-04. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to escalate privileges on an affected…
CVE-2021-34788, published 2021-10-06. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library…
CVE-2021-1568, published 2021-06-16. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. This…
CVE-2021-1567, published 2021-06-16. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected…
CVE-2021-1519, published 2021-05-06. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to overwrite VPN profiles on an…