CVE-2020-3153

Cisco AnyConnect for Windows mishandles directory paths, allowing attackers with valid credentials to copy malicious files to arbitrary locations with system-level privileges.

This unpatched vulnerability enables DLL pre-loading and hijacking, granting system-level access to attackers who already have valid credentials. DIB organizations must ensure AnyConnect is patched immediately, as this flaw was actively exploited in the wild and linked to ransomware campaigns. Failure to patch exposes the entire network to lateral movement and privilege escalation.

Shame score — A critical, actively exploited vulnerability in a widely deployed security client that was left unpatched long enough to be weaponized by ransomware actors.