Vulnerability Bulletins

Cisco Secure Client Software Denial of Service Vulnerabilities


System information

   
Affected software Cisco

Description

Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. These vulnerabilities are due to an out-of-bounds memory read from Cisco Secure Client Software. An attacker could exploit these vulnerabilities by logging in to an affected device at the same time that another user is accessing Cisco Secure Client on the same system, and then

More info:

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-accsc-dos-9SLzkZ8?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Secure%20Client%20Software%20Denial%20of%20Service%20Vulnerabilities&vs_k=1

Standar resources

Property Value
CVE CVE-2023-20240 and CVE-2023-20241.

Version history

Version Comments Date
Ministerio de Defensa
CNI
CCN
CCN-CERT