Access Control Vulnerability in Cisco AnyConnect Software for Windows
CVE-2017-3813

7.8HIGH

Key Information:

Vendor: Cisco
Status: Cisco Anyconnect Secure Mobility Client Software For Windows Versions Prior To Released Versions 4.4.00243 And Later And 4.3.05017 And Later.
Vendor: CVE Published:; 9 February 2017

What is CVE-2017-3813?

A vulnerability exists in the Start Before Logon (SBL) module of Cisco AnyConnect Secure Mobility Client Software for Windows, allowing an unauthenticated local attacker to exploit insufficient access controls. By executing Internet Explorer with elevated SYSTEM privileges, an attacker could potentially execute privileged commands on the host system. This flaw affects specific versions of the software, demanding prompt attention and remediation to ensure security integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Cisco AnyConnect Secure Mobility Client Software for Windows prior to released 4.4.00243 and later and 4.3.05017 and later. Cisco AnyConnect Secure Mobility Client Software for Windows Versions prior to released versions 4.4.00243 and later and 4.3.05017 and later.