csirt@kutim:~/threat-intel/cve/CVE-2023-20241

Katalog CVE

CVSS 5.5 · Medium EPSS 0,20%

Kerentanan Out-of-bounds Read pada cisco anyconnect secure mobility client, cisco secure client. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. These vulnerabilities are due to an out-of-bounds memory read from Cisco Secure Client Software. An attacker could exploit these vulnerabilities by logging in to an affected device at the same time that another user is accessing Cisco Secure Client on the same system, and then sending crafted packets to a port on that local host. A successful exploit could allow the attacker to crash the VPN Agent service, causing it to be unavailable to all users of the system. To exploit these vulnerabilities, the attacker must have valid credentials on a multi-user system.

Rincian

Terbit di NVD
22 November 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-125: Out-of-bounds Read
EPSS (30 hari)
0,20% peluang dieksploitasi; lebih tinggi dari 8,7% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco anyconnect secure mobility client Versi 4.9.00086
cisco anyconnect secure mobility client Versi 4.9.01095
cisco anyconnect secure mobility client Versi 4.9.02028
cisco anyconnect secure mobility client Versi 4.9.03047
cisco anyconnect secure mobility client Versi 4.9.03049
cisco anyconnect secure mobility client Versi 4.9.04043
cisco anyconnect secure mobility client Versi 4.9.04053
cisco anyconnect secure mobility client Versi 4.9.05042
cisco anyconnect secure mobility client Versi 4.9.06037
cisco secure client Versi 4.10.00093
cisco secure client Versi 4.10.01075
cisco secure client Versi 4.10.02086
cisco secure client Versi 4.10.03104
cisco secure client Versi 4.10.04065
cisco secure client Versi 4.10.04071
cisco secure client Versi 4.10.05085
cisco secure client Versi 4.10.05095
cisco secure client Versi 4.10.05111
cisco secure client Versi 4.10.06079
cisco secure client Versi 4.10.06090
cisco secure client Versi 4.10.07061
cisco secure client Versi 4.10.07062
cisco secure client Versi 4.10.07073
cisco secure client Versi 5.0.00238
cisco secure client Versi 5.0.00529
cisco secure client Versi 5.0.00556
cisco secure client Versi 5.0.01242
cisco secure client Versi 5.0.02075
cisco secure client Versi 5.0.03072
cisco secure client Versi 5.0.03076

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.