CVE-2023-20241
CVE-2023-20241 is a medium-severity vulnerability in Cisco Anyconnect Secure Mobility Client with a CVSS 3.x base score of 5.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-125.
Key facts
- Severity: Medium (CVSS 3.x base score 5.5)
- EPSS exploit prediction: 0% (10th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-125
- Affected product: Cisco Anyconnect Secure Mobility Client
- Published:
- Last modified:
Description
Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. These vulnerabilities are due to an out-of-bounds memory read from Cisco Secure Client Software. An attacker could exploit these vulnerabilities by logging in to an affected device at the same time that another user is accessing Cisco Secure Client on the same system, and then sending crafted packets to a port on that local host. A successful exploit could allow the attacker to crash the VPN Agent service, causing it to be unavailable to all users of the system. To exploit these vulnerabilities, the attacker must have valid credentials on a multi-user system.
Frequently asked questions
- What is CVE-2023-20241?
- Multiple vulnerabilities in Cisco Secure Client Software, formerly AnyConnect Secure Mobility Client, could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. These vulnerabilities are due to an out-of-bounds memory read from Cisco Secure Client Software. An attacker could exploit these vulnerabilities by logging in to an affected device at the same time that another user is accessing Cisco Secure Client on the same system, and then sending crafted packets to a port on that local host. A successful exploit could allow the attacker to crash the VPN Agent service, causing it to be unavailable to all users of the system. To exploit these vulnerabilities, the attacker must have valid credentials on a multi-user system.
- How severe is CVE-2023-20241?
- CVE-2023-20241 has a CVSS 3.x base score of 5.5, rated medium severity. It is exploitable over local access with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
- Is CVE-2023-20241 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (10th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-20241?
- CVE-2023-20241 primarily affects Cisco Anyconnect Secure Mobility Client. In total, 30 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2023-20241?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2023-20241 published?
- CVE-2023-20241 was published on 2023-11-22 and last updated on 2026-06-17.
References
Affected products (30)
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.00086:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.01095:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.02028:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.03047:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.03049:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.04043:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.04053:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.05042:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9.06037:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.00093:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.01075:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.02086:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.03104:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.04065:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.04071:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.05085:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.05095:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.05111:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.06079:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.06090:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.07061:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.07062:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:4.10.07073:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:5.0.00238:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:5.0.00529:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:5.0.00556:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:5.0.01242:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:5.0.02075:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:5.0.03072:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:secure_client:5.0.03076:*:*:*:*:*:*:*
More vulnerabilities in Cisco Anyconnect Secure Mobility Client
- CVE-2012-3088 — Critical (CVSS 9.3): Cisco AnyConnect Secure Mobility Client 3.1.x before 3.1.00495, and 3.2.x, does not check whether an HTTP request…
- CVE-2012-2493 — Critical (CVSS 9.3): The VPN downloader implementation in the WebLaunch feature in Cisco AnyConnect Secure Mobility Client 2.x before 2.5…
- CVE-2011-2040 — Critical (CVSS 9.3): The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and…
- CVE-2023-20178 — High (CVSS 7.8): A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco…
- CVE-2021-1366 — High (CVSS 7.8): A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows…
- CVE-2021-1237 — High (CVSS 7.8): A vulnerability in the Network Access Manager and Web Security Agent components of Cisco AnyConnect Secure Mobility…
All CVEs affecting Cisco Anyconnect Secure Mobility Client →
Other CWE-125 (Out-of-bounds Read) vulnerabilities
- CVE-2026-24826 — Critical (CVSS 10.0): Out-of-bounds Write, Divide By Zero, NULL Pointer Dereference, Use of Uninitialized Resource, Out-of-bounds Read,…
- CVE-2024-22004 — Critical (CVSS 10.0): Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a…
- CVE-2021-41556 — Critical (CVSS 10.0): sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that…
- CVE-2021-21777 — Critical (CVSS 10.0): An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer…
- CVE-2017-14451 — Critical (CVSS 10.0): An exploitable out-of-bounds read vulnerability exists in libevm (Ethereum Virtual Machine) of CPP-Ethereum. A…
- CVE-2013-0767 — Critical (CVSS 10.0): The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and…