Public mode

No tenant, Graph, or device access. Every item links to its source. What this means

CVE-2020-3433CISA KEV

Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

CISA lists this Cisco AnyConnect Secure vulnerability as known exploited. The vendor's advisory has the fixed versions.

CISA catalog record

Cisco AnyConnect Secure Mobility Client for Windows interprocess communication (IPC) channel allows for insufficient validation of resources that are loaded by the application at run time. An attacker with valid credentials on Windows could execute code on the affected machine with SYSTEM privileges.

Product: AnyConnect Secure
Added to KEV: 24 Oct 2022
Federal remediation due: 14 Nov 2022
Known ransomware use: Yes

What changed

First observed 14 Oct 2026

No field changes in the recorded history.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.