Cisco Secure Client
Monthly
Local privilege escalation in the Secure Firewall Posture module of Cisco Secure Client lets an authenticated local user send crafted IPC messages to a local socket and perform limited privileged file writes as SYSTEM or root; on macOS and Linux this can be extended to full root. The flaw affects Secure Client installations with the Posture module on Windows, macOS, and Linux, with the highest practical risk on macOS/Linux. No public exploit code or active exploitation was identified at time of analysis, and exploitation requires prior local account access plus the Posture module running.
Local privilege escalation in the Secure Firewall Posture module of Cisco Secure Client lets an authenticated local user send crafted IPC messages to a local socket and perform limited privileged file writes as SYSTEM or root; on macOS and Linux this can be extended to full root. The flaw affects Secure Client installations with the Posture module on Windows, macOS, and Linux, with the highest practical risk on macOS/Linux. No public exploit code or active exploitation was identified at time of analysis, and exploitation requires prior local account access plus the Posture module running.