Skip to content
CVE Tracker
Back

CVE-2017-6638

A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local…

High7.8EPSS 0.37%
Published
Updated
Reserved
Assigned by
cisco

Description

A vulnerability in how DLL files are loaded with Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to install and run an executable file with privileges equivalent to the Microsoft Windows SYSTEM account. The vulnerability is due to incomplete input validation of path and file names of a DLL file before it is loaded. An attacker could exploit this vulnerability by creating a malicious DLL file and installing it in a specific system directory. A successful exploit could allow the attacker to execute commands on the underlying Microsoft Windows host with privileges equivalent to the SYSTEM account. The attacker would need valid user credentials to exploit this vulnerability. This vulnerability affects all Cisco AnyConnect Secure Mobility Client for Windows software versions prior to 4.4.02034. Cisco Bug IDs: CSCvc97928.

Scores

CVSS scores of CVE-2017-6638, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0High7.8CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.37% · top 69% of all CVEs (4 Nov 2026)
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Weakness

Affected products

  • Cisco AnyConnect Local Privilege Escalation Vulnerability

    • affected Cisco AnyConnect Local Privilege Escalation Vulnerability

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2017-6638 badge
[![CVE-2017-6638](https://trackcve.app/badge/CVE-2017-6638.svg)](https://trackcve.app/cve/CVE-2017-6638)

Record last updated .