CVE-2023-20241

Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. These vulnerabilities are due to an out-of-bounds memory read from Cisco Secure Client Software. An attacker could exploit these vulnerabilities by logging in to an affected device at the same time that another user is accessing Cisco Secure Client on the same system, and then sending crafted packets to a port on that local host. A successful exploit could allow the attacker to crash the VPN Agent service, causing it to be unavailable to all users of the system. To exploit these vulnerabilities, the attacker must have valid credentials on a multi-user system.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.00086:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.01095:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.02028:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.03047:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.03049:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.04043:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.04053:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.05042:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.06037:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:cisco:secure_client:4.10.00093:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.01075:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.02086:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.03104:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.04065:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.04071:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.05085:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.05095:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.05111:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.06079:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.06090:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.07061:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.07062:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.07073:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.00238:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.00529:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.00556:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.01242:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.02075:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.03072:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.03076:*:*:*:*:*:*:*

History

21 Nov 2024, 07:40

Type Values Removed Values Added
References () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-accsc-dos-9SLzkZ8 - Issue Tracking, Vendor Advisory () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-accsc-dos-9SLzkZ8 - Issue Tracking, Vendor Advisory

30 Nov 2023, 20:38

Type Values Removed Values Added
First Time Cisco secure Client
Cisco anyconnect Secure Mobility Client
Cisco
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
CWE CWE-125
CPE cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.03047:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.07062:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.03076:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.01075:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.01242:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.03072:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.00529:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.04071:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.07061:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.02028:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.00238:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.05042:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.06079:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.04065:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.02086:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.04043:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.06037:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.06090:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.03104:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.00556:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:5.0.02075:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.00093:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.05095:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.05111:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.04053:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.00086:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.01095:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.05085:*:*:*:*:*:*:*
cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.03049:*:*:*:*:*:*:*
cpe:2.3:a:cisco:secure_client:4.10.07073:*:*:*:*:*:*:*
References () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-accsc-dos-9SLzkZ8 - () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-accsc-dos-9SLzkZ8 - Issue Tracking, Vendor Advisory

22 Nov 2023, 17:31

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-22 17:15

Updated : 2024-11-21 07:40


NVD link : CVE-2023-20241

Mitre link : CVE-2023-20241

CVE.ORG link : CVE-2023-20241


JSON object : View

Products Affected

cisco

  • anyconnect_secure_mobility_client
  • secure_client
CWE
CWE-125

Out-of-bounds Read