CVE-2019-16007
CVE-2019-16007 is a high-severity vulnerability in Cisco Anyconnect Secure Mobility Client with a CVSS 3.x base score of 7.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-345.
Key facts
- Severity: High (CVSS 3.x base score 7.1)
- CVSS v2: 5.8
- EPSS exploit prediction: 0% (28th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-345
- Affected product: Cisco Anyconnect Secure Mobility Client
- Published:
- Last modified:
Description
A vulnerability in the inter-service communication of Cisco AnyConnect Secure Mobility Client for Android could allow an unauthenticated, local attacker to perform a service hijack attack on an affected device or cause a denial of service (DoS) condition. The vulnerability is due to the use of implicit service invocations. An attacker could exploit this vulnerability by persuading a user to install a malicious application. A successful exploit could allow the attacker to access confidential user information or cause a DoS condition on the AnyConnect application.
Frequently asked questions
- What is CVE-2019-16007?
- A vulnerability in the inter-service communication of Cisco AnyConnect Secure Mobility Client for Android could allow an unauthenticated, local attacker to perform a service hijack attack on an affected device or cause a denial of service (DoS) condition. The vulnerability is due to the use of implicit service invocations. An attacker could exploit this vulnerability by persuading a user to install a malicious application. A successful exploit could allow the attacker to access confidential user information or cause a DoS condition on the AnyConnect application.
- How severe is CVE-2019-16007?
- CVE-2019-16007 has a CVSS 3.x base score of 7.1, rated high severity. It is exploitable over local access with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is high, integrity none, and availability high.
- Is CVE-2019-16007 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (28th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2019-16007?
- CVE-2019-16007 affects Cisco Anyconnect Secure Mobility Client. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2019-16007?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2019-16007 published?
- CVE-2019-16007 was published on 2020-09-23 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:android:*:*
More vulnerabilities in Cisco Anyconnect Secure Mobility Client
- CVE-2012-3088 — Critical (CVSS 9.3): Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request…
- CVE-2012-2493 — Critical (CVSS 9.3): The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5…
- CVE-2011-2040 — Critical (CVSS 9.3): The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and…
- CVE-2023-20178 — High (CVSS 7.8): A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco…
- CVE-2021-1366 — High (CVSS 7.8): A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows…
- CVE-2021-1237 — High (CVSS 7.8): A vulnerability in the Network Access Manager and Web Security Agent components of Cisco AnyConnect Secure Mobility…
All CVEs affecting Cisco Anyconnect Secure Mobility Client →
Other CWE-345 (Insufficient Verification of Data Authenticity) vulnerabilities
- CVE-2026-35051 — Critical (CVSS 10.0): Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an…
- CVE-2014-8165 — Critical (CVSS 10.0): scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote…
- CVE-2026-50195 — Critical (CVSS 9.9): containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the…
- CVE-2022-36130 — Critical (CVSS 9.9): HashiCorp Boundary up to 0.10.1 did not properly perform data integrity checks to ensure the resources were associated…
- CVE-2026-50214 — Critical (CVSS 9.8): The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing…
- CVE-2025-15385 — Critical (CVSS 9.8): Insufficient Verification of Data Authenticity vulnerability in TECNO Mobile com.Afmobi.Boomplayer allows…
Browse all CWE-345 (Insufficient Verification of Data Authenticity) vulnerabilities →