CVE-2020-3153
CISA KEVPublished October 24, 2022 · Updated April 3, 2026
high
Official Description+
Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.
Affected Products
| Vendor | Product |
|---|---|
| Cisco | AnyConnect Secure |
Patch Status
Patch by 2022-11-14
Recommended Actions
- Check if your systems use any of the affected products listed above.
- Apply vendor patches immediately if available.
- This vulnerability is in CISA's Known Exploited Vulnerabilities catalog — prioritize remediation.
- Monitor vendor advisories for updates and additional mitigations.
- Review logs for indicators of compromise related to CVE-2020-3153.