cisco-sa-ac-leak-Sew6g2kd: Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables Affecting Cisco AnyConnect Secure Mobility Client and Cisco Secure Client
On August 8, 2023, the paper Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables was made public. The paper discusses two attacks that can cause VPN clients to leak traffic outside the protected VPN tunnel. In both instances, an attacker can manipulate routing
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-ac-leak-Sew6g2kd?
The severity of cisco-sa-ac-leak-Sew6g2kd is assessed as high due to the potential for significant data leakage.
How do I fix cisco-sa-ac-leak-Sew6g2kd?
To fix cisco-sa-ac-leak-Sew6g2kd, update to the latest version of Cisco AnyConnect Secure Mobility Client or Cisco Secure Client that addresses the vulnerability.
What products are affected by cisco-sa-ac-leak-Sew6g2kd?
cisco-sa-ac-leak-Sew6g2kd affects the Cisco AnyConnect Secure Mobility Client and Cisco Secure Client.
What type of attacks does cisco-sa-ac-leak-Sew6g2kd expose VPN clients to?
cisco-sa-ac-leak-Sew6g2kd exposes VPN clients to attacks that can manipulate routing tables to leak traffic outside protected tunnels.
When was the cisco-sa-ac-leak-Sew6g2kd vulnerability publicly disclosed?
The cisco-sa-ac-leak-Sew6g2kd vulnerability was publicly disclosed on August 8, 2023.