Certificate Management Vulnerability in Cisco AnyConnect Products
CVE-2018-0334

4.8MEDIUM

Key Information:

Vendor
Cisco
Status
Cisco Anyconnect Secure Mobility Client Unknown
Vendor
CVE Published:
7 June 2018

Summary

A security vulnerability exists in the certificate management subsystem of Cisco AnyConnect Network Access Manager and Secure Mobility Client across multiple platforms. This flaw could be leveraged by an unauthenticated, remote attacker to bypass TLS certificate verification during the download process of specific configuration files. The exploitation is facilitated by improper implementation of the Simple Certificate Enrollment Protocol and inadequate validation of server certificates. Attackers capable of exploiting this vulnerability could alter sensitive configuration profiles, certificates, or localization data utilized by the AnyConnect Secure Mobility Client.

Affected Version(s)

Cisco AnyConnect Secure Mobility Client unknown Cisco AnyConnect Secure Mobility Client unknown

References

http://www.securityfocus.com/bid/104430
vdb-entryx_refsource_BID
https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1041075
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.