cisco-sa-secure-nam-priv-esc-szu2vYpZ: Cisco Secure Client for Windows with Network Access Manager Module Privilege Escalation Vulnerability
First published: Wed May 15 2024(Updated: )
A vulnerability in the Network Access Manager (NAM) module of Cisco Secure Client could allow an unauthenticated attacker with physical access to an affected device to elevate privileges to SYSTEM.This vulnerability is due to a lack of authentication on a specific
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Secure |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-secure-nam-priv-esc-szu2vYpZ?
The severity of cisco-sa-secure-nam-priv-esc-szu2vYpZ is high due to its potential to allow unauthenticated privilege escalation.
How do I fix cisco-sa-secure-nam-priv-esc-szu2vYpZ?
To fix cisco-sa-secure-nam-priv-esc-szu2vYpZ, update to the latest version of Cisco Secure Client that addresses this vulnerability.
Who is affected by cisco-sa-secure-nam-priv-esc-szu2vYpZ?
Users of Cisco Secure Client could be affected by cisco-sa-secure-nam-priv-esc-szu2vYpZ if they have physical access to the device.
What causes the vulnerability cisco-sa-secure-nam-priv-esc-szu2vYpZ?
cisco-sa-secure-nam-priv-esc-szu2vYpZ is caused by a lack of authentication on a specific functionality within the Network Access Manager module.
Can cisco-sa-secure-nam-priv-esc-szu2vYpZ be exploited remotely?
No, cisco-sa-secure-nam-priv-esc-szu2vYpZ requires physical access to the affected device for exploitation.
- collector/cisco-recent
- source/Cisco
- agent/title
- agent/weakness
- agent/references
- agent/severity
- agent/last-modified-date
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco secure