Cisco discloses AnyConnect VPN zero-day, exploit code available

guest · Nov 4, 2020

Cisco discloses AnyConnect VPN zero-day, exploit code available
November 4, 2020
https://www.bleepingcomputer.com/ne...yconnect-vpn-zero-day-exploit-code-available/

Cisco has disclosed today a zero-day vulnerability in the Cisco AnyConnect Secure Mobility Client software with proof-of-concept exploit code publicly available.

While security updates are not yet available for this arbitrary code execution vulnerability, Cisco is working on addressing the zero-day, with a fix coming in a future AnyConnect client release.
However, the Cisco AnyConnect Secure Mobility Client security flaw has not yet been exploited in the wild according to the Cisco Product Security Incident Response Team (PSIRT).
Click to expand...

Devices with default configurations not vulnerable
The high severity vulnerability tracked as CVE-2020-3556 exists in the interprocess communication (IPC) channel of Cisco AnyConnect Client and it may allow authenticated and local attackers to execute malicious scripts via a targeted user.

"A vulnerable configuration requires both the Auto Update setting and Enable Scripting setting to be enabled," Cisco explains. "Auto Update is enabled by default, and Enable Scripting is disabled by default."
Mitigation available
Even though there are no workarounds available to address CVE-2020-3556, it can be mitigated by disabling the Auto Update feature.
The attack surface can also be drastically decreased by toggling off the Enable Scripting configuration setting on devices where it's enabled.
Click to expand...

Log in or Sign up

Cisco discloses AnyConnect VPN zero-day, exploit code available

guest Guest

Log in or Sign up

Cisco discloses AnyConnect VPN zero-day, exploit code available

guest Guest

Useful Searches