cisco-sa-anyconnect-lib-hija-cAFB7x4q: Cisco AnyConnect Secure Mobility Client for Linux and Mac OS with VPN Posture (HostScan) Module Shared Library Hijacking Vulnerability
First published: Wed Oct 06 2021(Updated: )
A vulnerability in the shared library loading mechanism of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS could allow an authenticated, local attacker to perform a shared library hijacking attack on an affected device if the VPN Posture (HostScan) Module is installed on the AnyConnect client. This vulnerability is due to a race condition in the signature verification process for shared library files that are loaded on an affected device. An attacker could exploit this vulnerability by sending a series of crafted interprocess communication (IPC) messages to the AnyConnect process. A successful exploit could allow the attacker to execute arbitrary code on the affected device with root privileges. To exploit this vulnerability, the attacker must have a valid account on the system. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-lib-hija-cAFB7x4q
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco AnyConnect Secure Mobility Client | =Earlier than 4.10.03104<4.10.03104 | 4.10.03104 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-anyconnect-lib-hija-cAFB7x4q?
The severity of cisco-sa-anyconnect-lib-hija-cAFB7x4q is considered high as it allows local authenticated attackers to execute malicious code via shared library hijacking.
How do I fix cisco-sa-anyconnect-lib-hija-cAFB7x4q?
To fix cisco-sa-anyconnect-lib-hija-cAFB7x4q, upgrade the Cisco AnyConnect Secure Mobility Client to version 4.10.03104 or later.
Who is affected by cisco-sa-anyconnect-lib-hija-cAFB7x4q?
Users of Cisco AnyConnect Secure Mobility Client for Linux and Mac OS versions earlier than 4.10.03104 are affected by cisco-sa-anyconnect-lib-hija-cAFB7x4q.
What types of attacks does cisco-sa-anyconnect-lib-hija-cAFB7x4q enable?
cisco-sa-anyconnect-lib-hija-cAFB7x4q enables authenticated local attackers to perform shared library hijacking attacks.
Is the VPN Posture (HostScan) Module involved in cisco-sa-anyconnect-lib-hija-cAFB7x4q?
Yes, the vulnerability in cisco-sa-anyconnect-lib-hija-cAFB7x4q is relevant if the VPN Posture (HostScan) Module is installed on the affected device.
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/title
- agent/weakness
- agent/severity
- agent/references
- agent/event
- agent/description
- agent/source
- agent/tags
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco anyconnect secure mobility client
- version/cisco anyconnect secure mobility client/earlier than 4.10.03104