What is CVE-2023-20178?

CVE-2023-20178 is a high-severity vulnerability affecting certain Cisco software on Windows systems. It allows a low-privileged, authenticated, local attacker to elevate their privileges to those of SYSTEM, potentially compromising the security of the affected system. This vulnerability is caused by improper permissions assigned to a temporary directory during the update process. Users of the affected Cisco software should be aware of this vulnerability and take necessary precautions to protect their systems.

Who is impacted?

The CVE-2023-20178 vulnerability affects users of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows. Specifically, versions up to (but not including) 4.10.07061 for Cisco AnyConnect Secure Mobility Client Software and up to (but not including) 5.0.02075 for Cisco Secure Client Software for Windows are impacted by this vulnerability.

What to do if CVE-2023-20178 affected you

If you're affected by the CVE-2023-20178 vulnerability, it's important to take action to protect your system. Follow these simple steps:

1. Identify if your Cisco software is affected by checking the version numbers mentioned earlier.

2. Visit the NVD page for the vulnerability to stay informed about updates and patches.

3. Monitor Cisco's official channels for any security advisories or updates related to this vulnerability.

4. Apply any available patches or updates as soon as they are released by Cisco.

Is it in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2023-20178 vulnerability, also known as Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows - Privilege Escalation Vulnerability, is not listed in CISA's Known Exploited Vulnerabilities Catalog. There is no specific date added, due date, or required action mentioned. To protect your system, refer to the vendor advisory for mitigation steps and apply necessary updates or patches.

Weakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-276, which refers to incorrect default permissions.

Learn More

CVE-2023-20178 highlights the importance of staying informed and taking necessary precautions to protect systems from vulnerabilities. For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD page or the links below.

• NVD - CVE-2023-20178

• Cisco Security Advisory