CVE-2021-40124

CWE-266CWE-269 — Improper Privilege Management4 documents4 sources
Severity
7.8HIGH
EPSS
0.0%
top 89.22%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Anyconnect Secure Mobility ClientCisco Cisco Anyconnect Secure Mobility Client
Timeline
PublishedNov 4
Latest updateMay 24

Description

A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to escalate privileges on an affected device. This vulnerability is due to incorrect privilege assignment to scripts executed before user logon. An attacker could exploit this vulnerability by configuring a script to be executed before logon. A successful exploit could allow the attacker to execute arbitrary code with SYSTEM privileges.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-x848-mf45-8cv4: A vulnerability in the Network Access Manager (NAM) module of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local↗2022-05-24
▶
CVEList
Cisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability↗2021-11-04
▶

📋Vendor Advisories

1
Cisco
Cisco AnyConnect Secure Mobility Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability↗2021-11-03
▶
CVE-2021-40124 (HIGH CVSS 7.8) | A vulnerability in the Network Acce | cvebase.io