CVE-2025-20206
published 2025-03-05CVE-2025-20206: A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a…
PriorityP345high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.17%
6.8th percentile
A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewall Posture Engine, formerly HostScan, is installed on Cisco Secure Client.
This vulnerability is due to insufficient validation of resources that are loaded by the application at run time. An attacker could exploit this vulnerability by sending a crafted IPC message to a specific Cisco Secure Client process. A successful exploit could allow the attacker to execute arbitrary code on the affected machine with SYSTEM privileges. To exploit this vulnerability, the attacker must have valid user credentials on the Windows system.
Affected
44 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
| cisco | cisco_secure_client | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vendor_cisco7.1HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability
vendor_cisco·2025-03-05·CVSS 7.1
CVE-2025-20206 [HIGH] CWE-347 Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability
Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability
A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewall Posture Engine, formerly HostScan, is installed on Cisco Secure Client.
This vulnerability is due to insufficient validation of resources that are loaded by the application at run time. An attacker could exploit this vulnerability by sending a crafted IPC message to a specific Cisco Secure Client process. A successful exploit could allow the attacker to execute arbitrary code on the affected machine with SYSTEM privileges. To exploit this vulnerability, the attacker must hav
Cisco
Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability
vendor_cisco·CVSS 3.1
CVE-2025-20206 Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability
CVE-2025-20206: Cisco Secure Client for Windows with Secure Firewall Posture Engine DLL Hijacking Vulnerability
A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewall Posture Engine, formerly HostScan, is installed on Cisco Secure Client. This vulnerability is due to insufficient validation of resources that are loaded by the application at run time. An attacker could exploit this vulnerability by sending a crafted IPC message to a specific Cisco Secure Client process. A successful exploit could allow the attacker to execute arbitrary code on the affected machine with SYSTEM privileges. To exploit this vulnerability, the att
GHSA
GHSA-xq6h-hm2m-hw55: A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to per
ghsa_unreviewed·2025-03-05
CVE-2025-20206 [HIGH] CWE-347 GHSA-xq6h-hm2m-hw55: A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to per
A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the Secure Firewall Posture Engine, formerly HostScan, is installed on Cisco Secure Client.
This vulnerability is due to insufficient validation of resources that are loaded by the application at run time. An attacker could exploit this vulnerability by sending a crafted IPC message to a specific Cisco Secure Client process. A successful exploit could allow the attacker to execute arbitrary code on the affected machine with SYSTEM privileges. To exploit this vulnerability, the attacker must have valid user credentials on the Windows system.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-03-05
Published