Tag

#anyconnect

1 post tagged #anyconnect.

Analysis · May 20, 2026 · Colten Anderson

The VPN bug that isn't on the gateway, it's the updater on the laptop

CVE-2020-3433 and CVE-2020-3153 are in the Cisco AnyConnect Windows client, not the VPN gateway. The weak point is the privileged helper service that auto-updates the client, which a local user can trick into running their code as SYSTEM.