CVE-2020-3556

CVE-2020-3556 is a local privilege escalation vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software. An authenticated, local attacker can exploit a lack of authentication in the IPC listener to execute malicious scripts with the privileges of the targeted AnyConnect user, provided an active AnyConnect session exists. The vulnerability has a CVSS score of 7.3 (HIGH), indicating a high severity due to its local attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Successful exploitation requires valid user credentials on the system. While there is no evidence of active exploitation in the wild (KEV: No), community discussion and media coverage suggest significant interest, with exploit code reportedly available. Cisco has not released software updates to address this vulnerability.