CVE-2020-3153

Deeper analysis AI-assisted summary

Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows allows an authenticated local attacker to copy user-supplied files into system-level directories with elevated privileges. The issue stems from incorrect handling of directory paths (CWE-427) and affects the Windows client installer, enabling operations such as arbitrary file placement that can facilitate DLL pre-loading or hijacking attacks. The CVSS 3.1 base score is 6.5 with an attack vector of local access, low complexity, and low privileges required.

An attacker with valid Windows credentials can create a malicious file and exploit the path-handling flaw to write it to protected system directories. Successful exploitation grants the ability to place attacker-controlled content, such as DLLs, in locations that the system or other privileged processes will load, resulting in privilege escalation without further user interaction.

The Cisco Security Advisory cisco-sa-ac-win-path-traverse-qO4HWBsj and associated public disclosures on Packet Storm and Full Disclosure provide additional technical details and remediation guidance for affected AnyConnect versions.