{"id":49034,"date":"2022-10-26T14:14:00","date_gmt":"2022-10-26T14:14:00","guid":{"rendered":"https:\/\/www.networkworld.com\/article\/3677552\/cisco-issues-fixes-for-active-exploits-of-its-windows-vpn-clients.html#tk.rss_security"},"modified":"2022-10-26T14:14:00","modified_gmt":"2022-10-26T14:14:00","slug":"cisco-issues-fixes-for-active-exploits-of-its-windows-vpn-clients","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/cisco-issues-fixes-for-active-exploits-of-its-windows-vpn-clients\/","title":{"rendered":"Cisco issues fixes for active exploits of its Windows VPN clients"},"content":{"rendered":"
<\/div>\n

Cisco is offering software updates for two of its AnyConnect for Windows products it says are actively being exploited in the field.<\/p>\n

AnyConnect for Windows is security software package, in this case for Windows machines, that sets up VPN connectivity, provides access control and supports other endpoint security features. Cisco said AnyConnect products for MacOS, Linux are not affected.<\/p>\n

Cisco said its Cisco Product Security Incident Response Team (PSIRT) is aware that proof-of-concept exploit code is available for the vulnerability, which is described in this advisory<\/a>.<\/p>\n

\u201cIn October 2022, the Cisco PSIRT became aware of additional attempted exploitation of this vulnerability in the wild. Cisco continues to strongly recommend that customers upgrade to a fixed software release to remediate this vulnerability,\u201d the vendor said in its alert for both vulnerabilities.<\/p>\n

There are no workarounds for the problems, but software updates are available<\/a> to address them, Cisco stated.<\/p>\n

The first vulnerability involves a weakness  in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows that could let an authenticated local attacker perform a Microsoft Dynamic Link Libranry (DLL) hijacking attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system, Cisco stated.<\/p>\n