CVE-2020-3153 CISA KEV · Actively exploitedLinked to ransomware
Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability
CVSS score
6.5
EPSS probability
%28.3
Risk score
3.7
Published
6 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
GitHub
Cisco AnyConnect < 4.8.02042 privilege escalation through path traversal
Makefile Go / Python
GitHub
PoC for CVE-2020-3153 Cisco AnyConnect Secure Mobility Client EoP
Makefile Go / Python
GitHub
POC code for CVE-2020-3153 - Cisco anyconnect path traversal vulnerability
Makefile Go / Python
Similar Vulnerabilities
10.0
CVE-2021-44228 Actively exploitedImproper input validation in Apache Log4j
Patch verified Public Exploits:22EPSS %100
10.0
CVE-2026-20079 Actively exploitedCisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
Workaround Public Exploits:3EPSS %88
8.6
CVE-2026-20230 Actively exploitedCisco Unified Communications Manager Server-Side Request Forgery Vulnerability
Workaround Public Exploits:1EPSS %88
7.5
CVE-2020-3452 Actively exploitedImproper input validation in Cisco Adaptive Security Appliance Software
Workaround Public Exploits:17EPSS %100
7.5
CVE-2018-0296 Actively exploitedImproper input validation in Cisco Firepower Threat Defense
Workaround Public Exploits:9EPSS %100
8.6
CVE-2025-20362 Actively exploitedMissing authorization in Cisco Secure Firewall Threat Defense
Workaround Public Exploits:2EPSS %87
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2020-3153"