CVE-2017-6638: Input Validation
First published: Thu Jun 08 2017(Updated: )
A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and run an executable file with privileges equivalent to the Microsoft Windows SYSTEM account. The vulnerability is due to incomplete input validation of path and file names of a DLL file before it is loaded. An attacker could exploit this vulnerability by creating a malicious DLL file and installing it in a specific system directory. A successful exploit could allow the attacker to execute commands on the underlying Microsoft Windows host with privileges equivalent to the SYSTEM account. The attacker would need valid user credentials to exploit this vulnerability. This vulnerability affects all Cisco AnyConnect Secure Mobility Client for Windows software versions prior to 4.4.02034. Cisco Bug IDs: CSCvc97928.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco AnyConnect | <=4.4.00243 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-6638?
CVE-2017-6638 has a high severity rating due to the potential for an authenticated local attacker to execute arbitrary code with SYSTEM privileges.
How do I fix CVE-2017-6638?
To mitigate CVE-2017-6638, update Cisco AnyConnect Secure Mobility Client to a version higher than 4.4.00243.
Who is affected by CVE-2017-6638?
CVE-2017-6638 affects users of Cisco AnyConnect Secure Mobility Client version 4.4.00243 and earlier on Windows platforms.
What type of attack does CVE-2017-6638 allow?
CVE-2017-6638 allows an attacker to load and execute malicious DLL files with elevated privileges.
Is CVE-2017-6638 a local vulnerability?
Yes, CVE-2017-6638 is a local vulnerability that requires authenticated access to the Windows system.
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco anyconnect
- version/cisco anyconnect/4.4.00243