Known Exploited Vulnerability: CVE-2020-3153

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

CVE detail
Catalog version: 2026.07.16 Date added: 2022-10-24 Due date: 2022-11-14 CISA catalog

Vendor: Cisco

Product: AnyConnect Secure

Required action: Apply updates per vendor instructions.

Known ransomware campaign use: Known

Notes: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ac-win-path-traverse-qO4HWBsj https://nvd.nist.gov/vuln/detail/CVE-2020-3153

CWEs

cvelogic Threat Intelligence