PT-2021-1674 · Cisco · Cisco Anyconnect Secure Mobility Client

Michael Henry · Published 2021-01-13 · Updated 2022-07-25 · CVE-2021-1258

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client (affected versions not specified)

Description A vulnerability in the upgrade component could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating system of an affected device. The issue is due to insufficient file permission restrictions. An attacker could exploit this by sending a crafted command from the local CLI to the application, allowing them to read arbitrary files on the underlying OS. The attacker would need valid user credentials to exploit this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-264

Related Identifiers

BDU:2021-00330

CVE-2021-1258

Affected Products

Cisco Anyconnect Secure Mobility Client

References · 6

• https://bdu.fstec.ru/vul/2021-00330 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-fileread-PbHbgHMj · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1258 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1258 · Security Note
• https://t.me/cvenotify/28812 · Telegram Post
• https://kc.mcafee.com/corporate/index?page=content&id=SB10382 · Note