deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-33813
Published: 2021-06-16
Description: An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://alephsecurity.com/vulns/aleph-2021003; https://github.com/hunterhacker/jdom/pull/188; https://github.com/hunterhacker/jdom/releases
CVE: CVE-2021-34683
Published: 2021-06-16
Description: An issue was discovered in EXCELLENT INFOTEK CORPORATION (EIC) E-document System 3.0. A remote attacker can use kw/auth/bbs/asp/get_user_email_info_bbs.asp to obtain the contact information (name and e-mail address) of everyone in the entire organization. This information can allow remote attackers to perform social engineering or brute force attacks against the system login page.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/ethancsyang/CveProject/tree/main/CVE-2021-34683; https://www.eic.com.tw/eicHome/pro00.html; https://github.com/ethancsyang/CveProject/tree/main/CVE-2021-34683
CVE: CVE-2021-27479
Published: 2021-06-16
Description: ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be executed by higher privilege users.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01; https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01
CVE: CVE-2021-27483
Published: 2021-06-16
Description: ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilege user to escalate privileges to an administrative level user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269, CWE-732
References: https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01; https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01
CVE: CVE-2021-27485
Published: 2021-06-16
Description: ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credentials from the web browser.
CVSS Score: 7.5 (HIGH)
CWE: CWE-257
References: https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01; https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01
CVE: CVE-2021-31159
Published: 2021-06-16
Description: Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: http://packetstormsecurity.com/files/163192/Zoho-ManageEngine-ServiceDesk-Plus-9.4-User-Enumeration.html; https://github.com/ricardojoserf/CVE-2021-31159; https://www.manageengine.com
CVE: CVE-2021-31857
Published: 2021-06-16
Description: In Zoho ManageEngine Password Manager Pro before 11.1 build 11104, attackers are able to retrieve credentials via a browser extension for non-website resource types.
CVSS Score: 5.9 (MEDIUM)
References: https://www.manageengine.com; https://www.manageengine.com/products/passwordmanagerpro/release-notes.html#pmp11104; https://www.manageengine.com
CVE: CVE-2021-32928
Published: 2021-06-16
Description: The Sentinel LDK Run-Time Environment installer (Versions 7.6 and prior) adds a firewall rule named “Sentinel License Manager” that allows incoming connections from private networks using TCP Port 1947. While uninstalling, the uninstaller fails to close Port 1947.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-459
References: https://us-cert.cisa.gov/ics/advisories/icsa-21-159-06; https://us-cert.cisa.gov/ics/advisories/icsa-21-159-06
CVE: CVE-2020-8299
Published: 2021-06-16
Description: Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based denial-of-service from within the same Layer 2 network segment. Note that the attacker must be in the same Layer 2 network segment as the vulnerable appliance.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://support.citrix.com/article/CTX297155; https://support.citrix.com/article/CTX297155
CVE: CVE-2020-8300
Published: 2021-06-16
Description: Citrix ADC and Citrix/NetScaler Gateway before 13.0-82.41, 12.1-62.23, 11.1-65.20 and Citrix ADC 12.1-FIPS before 12.1-55.238 suffer from improper access control allowing SAML authentication hijack through a phishing attack to steal a valid user session. Note that Citrix ADC or Citrix Gateway must be configured as a SAML SP or a SAML IdP for this to be possible.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://support.citrix.com/article/CTX297155; https://support.citrix.com/article/CTX297155
CVE: CVE-2021-21667
Published: 2021-06-16
Description: Jenkins Scriptler Plugin 3.2 and earlier does not escape parameter names shown in job configuration forms, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2021/06/16/3; https://www.jenkins.io/security/advisory/2021-06-16/#SECURITY-2224; http://www.openwall.com/lists/oss-security/2021/06/16/3
CVE: CVE-2021-21668
Published: 2021-06-16
Description: Jenkins Scriptler Plugin 3.1 and earlier does not escape script content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Scriptler/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2021/06/16/3; https://www.jenkins.io/security/advisory/2021-06-16/#SECURITY-2390; http://www.openwall.com/lists/oss-security/2021/06/16/3
CVE: CVE-2021-22914
Published: 2021-06-16
Description: Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue affects all versions of Citrix Cloud Connector that were installed by passing secure client parameters for installation via the command line. The issue does not affect Citrix Cloud Connector if it was installed using the interactive installer or where a parameter file was used with the command-line installer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-922, CWE-922
References: https://support.citrix.com/article/CTX316690; https://support.citrix.com/article/CTX316690
CVE: CVE-2021-27610
Published: 2021-06-16
Description: SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be exploited by malicious users to obtain illegitimate access to the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://launchpad.support.sap.com/#/notes/3007182; https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999; https://launchpad.support.sap.com/#/notes/3007182
CVE: CVE-2021-34801
Published: 2021-06-16
Description: Valine 1.4.14 allows remote attackers to cause a denial of service (application outage) by supplying a ua (aka User-Agent) value that only specifies the product and version.
CVSS Score: 5.3 (MEDIUM)
References: https://github.com/xCss/Valine/issues/366; https://github.com/xCss/Valine/issues/366
CVE: CVE-2021-34803
Published: 2021-06-16
Description: TeamViewer before 14.7.48644 on Windows loads untrusted DLLs in certain situations.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: https://community.teamviewer.com/English/discussion/111147/windows-v9-0-259145; https://community.teamviewer.com/English/discussion/111149/windows-v10-0-259144; https://community.teamviewer.com/English/discussion/111150/windows-v11-0-259143
CVE: CVE-2020-20444
Published: 2021-06-16
Description: Jact OpenClinic 0.8.20160412 allows the attacker to read server files after login to the the admin account by an infected 'file' GET parameter in '/shared/view_source.php' which "could" lead to RCE vulnerability .
CVSS Score: 7.2 (HIGH)
CWE: CWE-862
References: https://cwe.mitre.org/data/definitions/23.html; https://github.com/jact/openclinic/issues/8; https://cwe.mitre.org/data/definitions/23.html
CVE: CVE-2020-22198
Published: 2021-06-16
Description: SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajax_membergroup.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.hackdig.com/?02/hack-8391.htm; https://github.com/blindkey/DedeCMSv5/issues/1; http://www.hackdig.com/?02/hack-8391.htm
CVE: CVE-2020-24939
Published: 2021-06-16
Description: Prototype pollution in Stampit supermixer 1.0.3 allows an attacker to modify the prototype of a base object which can vary in severity depending on the implementation.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://cwe.mitre.org/data/definitions/1321.html; https://github.com/stampit-org/supermixer/compare/v1.0.4...v1.0.5; https://github.com/stampit-org/supermixer/issues/9
CVE: CVE-2020-27339
Published: 2021-06-16
Description: In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5).
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20
References: https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.insyde.com/security-pledge/SA-2021001
CVE: CVE-2020-35759
Published: 2021-06-16
Description: bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content (Locally/Remotely).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/alexlang24/bloofoxCMS/issues/10; https://github.com/alexlang24/bloofoxCMS/issues/10
CVE: CVE-2020-35760
Published: 2021-06-16
Description: bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload that allows attackers to upload malicious files (ex: php files).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/alexlang24/bloofoxCMS/issues/9; https://github.com/alexlang24/bloofoxCMS/issues/9
CVE: CVE-2020-35761
Published: 2021-06-16
Description: bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML Code.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/alexlang24/bloofoxCMS/issues/8; https://github.com/alexlang24/bloofoxCMS/issues/8
CVE: CVE-2020-35762
Published: 2021-06-16
Description: bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files.
CVSS Score: 2.7 (LOW)
CWE: CWE-22
References: https://github.com/alexlang24/bloofoxCMS/issues/11; https://github.com/alexlang24/bloofoxCMS/issues/11
CVE: CVE-2020-22199
Published: 2021-06-16
Description: SQL Injection vulnerability in phpCMS 2007 SP6 build 0805 via the digg_mod parameter to digg_add.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/blindkey/cve_like/issues/1; https://github.com/blindkey/cve_like/issues/1
CVE: CVE-2020-22200
Published: 2021-06-16
Description: Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to public_get_suggest_keyword.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/blindkey/cve_like/issues/2; https://github.com/blindkey/cve_like/issues/2
CVE: CVE-2020-22201
Published: 2021-06-16
Description: phpCMS 2008 sp4 allowas remote malicious users to execute arbitrary php commands via the pagesize parameter to yp/product.php.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://cwe.mitre.org/data/definitions/95.html; https://github.com/blindkey/cve_like/issues/4; https://cwe.mitre.org/data/definitions/95.html
CVE: CVE-2021-20483
Published: 2021-06-16
Description: IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197591.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-918
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/197591; https://www.ibm.com/support/pages/node/6464081; https://exchange.xforce.ibmcloud.com/vulnerabilities/197591
CVE: CVE-2021-20488
Published: 2021-06-16
Description: IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users in the Windows AD environment when IBM Security Identity Manager Windows Password Synch Plug-in is deployed and configured. IBM X-Force ID: 197789.
CVSS Score: 6.5 (MEDIUM)
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/197789; https://www.ibm.com/support/pages/node/6464081; https://exchange.xforce.ibmcloud.com/vulnerabilities/197789
CVE: CVE-2021-20566
Published: 2021-06-16
Description: IBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 199238.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199238; https://www.ibm.com/support/pages/node/6464043; https://exchange.xforce.ibmcloud.com/vulnerabilities/199238
CVE: CVE-2021-20567
Published: 2021-06-16
Description: IBM Resilient SOAR V38.0 could allow a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.IBM X-Force ID: 199239.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-311
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/199239; https://www.ibm.com/support/pages/node/6464039; https://exchange.xforce.ibmcloud.com/vulnerabilities/199239
CVE: CVE-2021-29702
Published: 2021-06-16
Description: Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. IBM X-Force ID: 200658.
CVSS Score: 7.5 (HIGH)
CWE: CWE-74
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/200658; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.ibm.com/support/pages/node/6463985
CVE: CVE-2020-22203
Published: 2021-06-16
Description: SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/blindkey/cve_like/issues/6; https://github.com/blindkey/cve_like/issues/6
CVE: CVE-2020-22204
Published: 2021-06-16
Description: SQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php. .
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/blindkey/cve_like/issues/7; https://github.com/blindkey/cve_like/issues/7
CVE: CVE-2020-22205
Published: 2021-06-16
Description: SQL Injection in ECShop 3.0 via the id parameter to admin/shophelp.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/blindkey/cve_like/issues/8; https://github.com/blindkey/cve_like/issues/8
CVE: CVE-2020-22206
Published: 2021-06-16
Description: SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliate_ck.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/blindkey/cve_like/issues/9; https://github.com/blindkey/cve_like/issues/9
CVE: CVE-2020-22208
Published: 2021-06-16
Description: SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajax_street.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/blindkey/cve_like/issues/10; https://github.com/blindkey/cve_like/issues/10
CVE: CVE-2020-22209
Published: 2021-06-16
Description: SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajax_common.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/blindkey/cve_like/issues/12; https://github.com/blindkey/cve_like/issues/12
CVE: CVE-2020-22210
Published: 2021-06-16
Description: SQL Injection in 74cms 3.2.0 via the x parameter to ajax_officebuilding.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/blindkey/cve_like/issues/11; https://github.com/blindkey/cve_like/issues/11
CVE: CVE-2020-22211
Published: 2021-06-16
Description: SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajax_street.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/blindkey/cve_like/issues/13; https://github.com/blindkey/cve_like/issues/13
CVE: CVE-2020-22212
Published: 2021-06-16
Description: SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/blindkey/cve_like/issues/14; https://github.com/blindkey/cve_like/issues/14
CVE: CVE-2021-1395
Published: 2021-06-16
Description: A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-xss-csHUdtrL; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-xss-csHUdtrL
CVE: CVE-2021-1524
Published: 2021-06-16
Description: A vulnerability in the API of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because requests that are sent to the API are not properly validated. An attacker could exploit this vulnerability by sending a malicious request to the API. A successful exploit could allow the attacker to cause all participants on a call to be disconnected, resulting in a DoS condition.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-meetingserver-dos-NzVWMMQT; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-meetingserver-dos-NzVWMMQT
CVE: CVE-2021-1541
Published: 2021-06-16
Description: Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ciscosb-multivulns-Wwyb7s5E; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ciscosb-multivulns-Wwyb7s5E
CVE: CVE-2021-1542
Published: 2021-06-16
Description: Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287, CWE-287
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ciscosb-multivulns-Wwyb7s5E; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ciscosb-multivulns-Wwyb7s5E
CVE: CVE-2021-1543
Published: 2021-06-16
Description: Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287, CWE-79
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ciscosb-multivulns-Wwyb7s5E; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ciscosb-multivulns-Wwyb7s5E
CVE: CVE-2021-1566
Published: 2021-06-16
Description: A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to intercept traffic between an affected device and the AMP servers. This vulnerability is due to improper certificate validation when an affected device establishes TLS connections. A man-in-the-middle attacker could exploit this vulnerability by sending a crafted TLS packet to an affected device. A successful exploit could allow the attacker to spoof a trusted host and then extract sensitive information or alter certain API requests.
CVSS Score: 7.4 (HIGH)
CWE: CWE-296, CWE-295
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-cert-vali-n8L97RW; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-cert-vali-n8L97RW
CVE: CVE-2021-1567
Published: 2021-06-16
Description: A vulnerability in the DLL loading mechanism of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture (HostScan) Module is installed on the AnyConnect client. This vulnerability is due to a race condition in the signature verification process for DLL files that are loaded on an affected device. An attacker could exploit this vulnerability by sending a series of crafted interprocess communication (IPC) messages to the AnyConnect process. A successful exploit could allow the attacker to execute arbitrary code on the affected device with SYSTEM privileges. To exploit this vulnerability, the attacker must have valid credentials on the Windows system.
CVSS Score: 7.0 (HIGH)
CWE: CWE-367, CWE-427
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-pos-dll-ff8j6dFv; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-pos-dll-ff8j6dFv
CVE: CVE-2021-1568
Published: 2021-06-16
Description: A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to uncontrolled memory allocation. An attacker could exploit this vulnerability by copying a crafted file to a specific folder on the system. A successful exploit could allow the attacker to crash the VPN Agent service when the affected application is launched, causing it to be unavailable to all users of the system. To exploit this vulnerability, the attacker must have valid credentials on a multiuser Windows system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-789
References: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dos-hMhyDfb8; https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dos-hMhyDfb8