CVE-2020-3432: Cisco AnyConnect Secure Mobility Client for Mac OS File Corruption Vulnerability
First published: Tue Feb 11 2025(Updated: )
A vulnerability in the uninstaller component of Cisco AnyConnect Secure Mobility Client for Mac OS could allow an authenticated, local attacker to corrupt the content of any file in the filesystem. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a symbolic link (symlink) to a target file on a specific path. A successful exploit could allow the attacker to corrupt the contents of the file. If the file is a critical systems file, the exploit could lead to a denial of service condition. To exploit this vulnerability, the attacker would need to have valid credentials on the system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
Credit: psirt@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco AnyConnect Secure |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-3432?
CVE-2020-3432 is classified as high severity due to its potential to allow local authenticated attackers to manipulate filesystem content.
How do I fix CVE-2020-3432?
To mitigate CVE-2020-3432, update to the latest version of Cisco AnyConnect Secure Mobility Client for Mac OS as advised by Cisco.
Who is affected by CVE-2020-3432?
CVE-2020-3432 affects users of Cisco AnyConnect Secure Mobility Client on Mac OS who have the vulnerable uninstaller version.
What exploitation methods can be used for CVE-2020-3432?
An attacker can exploit CVE-2020-3432 by running a specially crafted uninstaller that incorrectly handles directory paths.
Is remote access possible through CVE-2020-3432?
No, CVE-2020-3432 requires local access and authentication to the system to exploit the vulnerability.
- agent/weakness
- agent/type
- agent/references
- agent/first-publish-date
- agent/author
- agent/source
- agent/event
- agent/title
- agent/description
- collector/nvd-api
- source/NVD
- agent/severity
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco anyconnect secure