Exploitation Summary
CVE-2020-3153 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added October 24, 2022, with confirmed use in ransomware campaigns.
EIP tracks 4 public exploits from researchers including goichot, shubham0d, raspberry-pie, including a Metasploit module exploits/windows/local/anyconnect_lpe.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2020-3153, a vulnerability in Cisco ASA and FTD software. The exploit is written in C# and appears to target a remote code execution (RCE) flaw, likely leveraging a deserialization vulnerability.
Description
A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges. This could include DLL pre-loading, DLL hijacking, and other related attacks. To exploit this vulnerability, the attacker needs valid credentials on the Windows system.
Exploits (4)
This repository contains a functional exploit for CVE-2020-3153, a vulnerability in Cisco ASA and FTD software. The exploit is written in C# and appears to target a remote code execution (RCE) flaw, likely leveraging a deserialization vulnerability.
This repository contains a functional exploit for CVE-2020-3153, a path traversal vulnerability in Cisco AnyConnect Secure Mobility Client. The exploit leverages a crafted command to achieve local privilege escalation by manipulating file paths and executing arbitrary code with SYSTEM privileges.
This repository contains a functional proof-of-concept exploit for CVE-2020-3153, a path traversal vulnerability in Cisco AnyConnect Secure Mobility Client. The exploit leverages a crafted command to achieve local privilege escalation by executing a user-controlled binary as SYSTEM via the vpnagent.exe service.
This Metasploit module exploits CVE-2020-3153 and CVE-2020-3433 in Cisco AnyConnect Secure Mobility Client for Windows, leveraging path traversal and DLL hijacking to achieve local privilege escalation via crafted IPC requests to the AnyConnect service.
References (6)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N