cisco-sa-ac-leak-Sew6g2kd: Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables Affecting Cisco AnyConnect Secure Mobility Client and Cisco Secure Client
First published: Tue Aug 08 2023(Updated: )
On August 8, 2023, the paper Bypassing Tunnels: Leaking VPN Client Traffic by Abusing Routing Tables was made public. The paper discusses two attacks that can cause VPN clients to leak traffic outside the protected VPN tunnel. In both instances, an attacker can manipulate routing
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco AnyConnect Secure | ||
| Cisco Secure Client - AnyConnect VPN |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-ac-leak-Sew6g2kd?
The severity of cisco-sa-ac-leak-Sew6g2kd is assessed as high due to the potential for significant data leakage.
How do I fix cisco-sa-ac-leak-Sew6g2kd?
To fix cisco-sa-ac-leak-Sew6g2kd, update to the latest version of Cisco AnyConnect Secure Mobility Client or Cisco Secure Client that addresses the vulnerability.
What products are affected by cisco-sa-ac-leak-Sew6g2kd?
cisco-sa-ac-leak-Sew6g2kd affects the Cisco AnyConnect Secure Mobility Client and Cisco Secure Client.
What type of attacks does cisco-sa-ac-leak-Sew6g2kd expose VPN clients to?
cisco-sa-ac-leak-Sew6g2kd exposes VPN clients to attacks that can manipulate routing tables to leak traffic outside protected tunnels.
When was the cisco-sa-ac-leak-Sew6g2kd vulnerability publicly disclosed?
The cisco-sa-ac-leak-Sew6g2kd vulnerability was publicly disclosed on August 8, 2023.
- collector/cisco-recent
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco anyconnect secure
- canonical/cisco secure client - anyconnect vpn