DLL Hijacking Vulnerability in Cisco Secure Client for Windows

CVE-2025-20206

Summary

A vulnerability in Cisco Secure Client for Windows relates to the interprocess communication (IPC) channel, enabling authenticated local attackers to carry out a DLL hijacking attack. This security issue arises from inadequate validation of resources loaded during the application's runtime. By sending a specially crafted IPC message to a targeted process within Cisco Secure Client, an attacker can potentially execute arbitrary code on the device, operating with SYSTEM privileges. To successfully exploit this vulnerability, the attacker needs to possess valid user credentials on the Windows system where the Cisco Secure Client is installed.

References