cisco-sa-secure-nam-priv-esc-szu2vYpZ: Cisco Secure Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability
A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM.This vulnerability is due to a lack of authentication on a specific
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-secure-nam-priv-esc-szu2vYpZ?
The severity of cisco-sa-secure-nam-priv-esc-szu2vYpZ is high due to its potential to allow unauthenticated privilege escalation.
How do I fix cisco-sa-secure-nam-priv-esc-szu2vYpZ?
To fix cisco-sa-secure-nam-priv-esc-szu2vYpZ, update to the latest version of Cisco Secure Client that addresses this vulnerability.
Who is affected by cisco-sa-secure-nam-priv-esc-szu2vYpZ?
Users of Cisco Secure Client could be affected by cisco-sa-secure-nam-priv-esc-szu2vYpZ if they have physical access to the device.
What causes the vulnerability cisco-sa-secure-nam-priv-esc-szu2vYpZ?
cisco-sa-secure-nam-priv-esc-szu2vYpZ is caused by a lack of authentication on a specific functionality within the Network Access Manager module.
Can cisco-sa-secure-nam-priv-esc-szu2vYpZ be exploited remotely?
No, cisco-sa-secure-nam-priv-esc-szu2vYpZ requires physical access to the affected device for exploitation.