exploit/windows/local/anyconnect_lpe

weaponized

Cisco AnyConnect Privilege Escalations (CVE-2020-3153 and CVE-2020-3433)

view exploit source metasploittype exploitpublished 2020-08-05catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-3433US	high7.8OT critical	10.0% (96th)	KEV	2020-08-17
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL…
CVE-2020-3153US	medium6.5OT critical	28.3% (98th)	KEV	2020-02-19
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.