Recorded 14 Oct 2026 at 10:19 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
Cisco AnyConnect Secure Mobility Client for Windows allows for incorrect handling of directory paths. An attacker with valid credentials on Windows would be able to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks.
What it said
- CVE
- CVE-2020-3153
- Vendor
- Cisco
- Product
- AnyConnect Secure
- CISA KEV
- Listed 24 Oct 2022
- Known ransomware use
- Yes
- Federal remediation due
- 14 Nov 2022
Recorded links
Source evidence when recorded
- CISA KEV
- Complete at observationRead 14 Oct 2026 at 10:18 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.