CVE-2021-1366— Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-1366
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module DLL Hijacking Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture (HostScan) Module is installed on the AnyConnect client. This vulnerability is due to insufficient validation of resources that are loaded by the application at run time. An attacker could exploit this vulnerability by sending a crafted IPC message to the AnyConnect process. A successful exploit could allow the attacker to execute arbitrary code on the affected machine with SYSTEM privileges. To exploit this vulnerability, the attacker needs valid credentials on the Windows system.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
密码学签名的验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Anyconnect Secure Mobility Client 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Anyconnect Secure Mobility Client是美国思科（Cisco）公司的一款用于安全连接的VPN客户端软件。 Cisco AnyConnect Secure Mobility Client中存在代码问题漏洞，该漏洞源于网络系统或产品未充分验证数据的来源或真实性。攻击者可利用伪造的数据进行攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco AnyConnect Secure Mobility Client | n/a | - |
II. Public POCs for CVE-2021-1366
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | Cisco AnyConnect Posture (HostScan) Local Privilege Escalation: CVE-2021-1366 | https://github.com/koztkozt/CVE-2021-1366 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-1366
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dll-hijac-JrcTOQMCvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2021-1366
Same Patch Batch · Cisco · 2021-02-17 · 6 CVEs total
| CVE-2021-1412 | 6.5 MEDIUM | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities |
| CVE-2021-1416 | 6.5 MEDIUM | Cisco Identity Services Engine Sensitive Information Disclosure Vulnerabilities |
| CVE-2021-1351 | 6.1 MEDIUM | Cisco Webex Meetings Cross-Site Scripting Vulnerability |
| CVE-2021-1372 | 5.5 MEDIUM | Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows Shared Memory In |
| CVE-2021-1378 | 5.3 MEDIUM | Cisco StarOS Denial of Service Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco AnyConnect Secure Mobility Client
- CVE-2021-40124
Cisco AnyConnect Secure Mobility Client for Windows with Net - CVE-2021-34788
Cisco AnyConnect Secure Mobility Client for Linux and Mac OS - CVE-2021-1567
Cisco AnyConnect Secure Mobility Client for Windows with VPN - CVE-2021-1568
Cisco AnyConnect Secure Mobility Client for Windows Denial o - CVE-2021-1519
Cisco AnyConnect Secure Mobility Client Profile Modification
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-347
- CVE-2026-42193
Plunk: SNS webhook forgery - CVE-2026-44497
ZEBRA: Consensus Divergence in Transparent Sighash Hash-Type - CVE-2026-41669
Admidio: SAML Signature Validation Result Ignored — Forged A - CVE-2026-7689
Dolibarr ERP CRM Online Signature security.lib.php dol_verif - CVE-2026-33467
Improper Verification of Cryptographic Signature in Elastic
V. Comments for CVE-2021-1366
No comments yet