Known Exploited Vulnerabilities October 24, 2022 · CISA KEV Catalog

CVE-2020-3153: Cisco Any Connect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2020-3153 Cisco
Related: CVE-2026-20320: Cisco Broad Works Improper Restriction of XML External Entity Reference Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026
CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability Known Exploited Vulnerabilities · Oct 29, 2026
CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 14, 2026