The high severity vulnerability tracked as CVE-2020-3556 exists in the interprocess communication (IPC) channel of Cisco An圜onnect Client and it may allow authenticated and local attackers to execute malicious scripts via a targeted user. Devices with default configurations not vulnerable However, the Cisco An圜onnect Secure Mobility Client security flaw has not yet been exploited in the wild according to the Cisco Product Security Incident Response Team (PSIRT). While security updates are not yet available for this arbitrary code execution vulnerability, Cisco is working on addressing the zero-day, with a fix coming in a future An圜onnect client release. Cisco has disclosed today a zero-day vulnerability in the Cisco An圜onnect Secure Mobility Client software with proof-of-concept exploit code publicly available.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |