Denial of Service Vulnerability in Cisco AnyConnect Secure Mobility Client for Windows
CVE-2018-0373
5.5MEDIUM
Key Information:
- Vendor
Cisco
- Vendor
- CVE Published:
- 21 June 2018
What is CVE-2018-0373?
A vulnerability exists in the vpnva-6.sys and vpnva64-6.sys components of Cisco AnyConnect Secure Mobility Client for Windows desktop, which could be exploited by an authenticated local attacker to create a denial of service (DoS) condition. The issue arises from improper validation of user-supplied data, allowing the attacker to send crafted requests to the application. A successful exploit may lead to a DoS situation on the compromised system.
Affected Version(s)
Cisco AnyConnect Secure Mobility Client unknown Cisco AnyConnect Secure Mobility Client unknown