CVE-2020-3153
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
6.5
CVSS 3.1
28.3 %
EPSS (current)
2022-10-24
KEV addition
Yes
Ransomware
Timeline
Publication, first public exploit and KEV addition on a day axis.
Key facts
Vendor / product: Cisco / AnyConnect Secure
Published: 2020-02-19 · Due (CISA): 2022-11-14
CWE: CWE-427 · EU list: no
Exploit references (metadata only)
| Source | Reference | Title | Date |
|---|---|---|---|
| metasploit | exploit/windows/local/anyconnect_lpe | exploit/windows/local/anyconnect_lpe | 2020-08-05 |
References only — no downloads or instructions.