cisco-sa-20180606-AnyConnect-cert-bypass: Cisco AnyConnect Secure Mobility Client Certificate Bypass Vulnerability
First published: Wed Jun 06 2018(Updated: )
A vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access Manager and of Cisco AnyConnect Secure Mobility Client for iOS, Mac OS X, Android, Windows, and Linux could allow an unauthenticated, remote attacker to bypass the TLS certificate check when downloading certain configuration files. The vulnerability is due to improper use of Simple Certificate Enrollment Protocol and improper server certificate validation. An attacker could exploit this vulnerability by preparing malicious profile and localization files for Cisco AnyConnect to use. A successful exploit could allow the attacker to remotely change the configuration profile, a certificate, or the localization data used by AnyConnect Secure Mobility Client. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180606-AnyConnect-cert-bypass
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco AnyConnect Secure | ||
| Cisco AnyConnect VPN |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-20180606-AnyConnect-cert-bypass?
The severity of cisco-sa-20180606-AnyConnect-cert-bypass is classified as high due to the potential for remote exploitation.
How do I fix cisco-sa-20180606-AnyConnect-cert-bypass?
To fix cisco-sa-20180606-AnyConnect-cert-bypass, ensure that you update your Cisco AnyConnect software to the latest version provided by the vendor.
What systems are affected by cisco-sa-20180606-AnyConnect-cert-bypass?
cisco-sa-20180606-AnyConnect-cert-bypass affects Cisco AnyConnect Secure Mobility Client and Cisco AnyConnect Network Access Manager across multiple platforms including iOS, Mac OS X, Android, Windows, and Linux.
What does the cisco-sa-20180606-AnyConnect-cert-bypass vulnerability allow an attacker to do?
The cisco-sa-20180606-AnyConnect-cert-bypass vulnerability allows an unauthenticated, remote attacker to bypass TLS certificate checks.
Is a workaround available for cisco-sa-20180606-AnyConnect-cert-bypass?
No official workaround is provided for cisco-sa-20180606-AnyConnect-cert-bypass; updating the affected software is the recommended action.
- agent/type
- agent/event
- agent/first-publish-date
- collector/cisco-advisory
- source/Cisco
- agent/severity
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/title
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco anyconnect secure
- canonical/cisco anyconnect vpn