Cisco Anyconnect Secure Mobility Client 4.10.06... [ 2025 ]

On macOS, improved behavior for server reachability tests and fixed intermittent website loading issues with SWG.

All customers with valid AnyConnect/Secure Client term licenses or perpetual licenses with active support contracts are eligible to upgrade to the current Cisco Secure Client 5.1.x version at no charge. Cisco has stated, "MOVING FORWARD, ALL ENHANCEMENTS AND BUG FIXES WILL BE PROVIDED AS PART OF THE CISCO SECURE CLIENT 5.1.X VERSION".

A high-severity vulnerability (CVE-2023-20178) was found in the upgrade process of the Windows client. It existed because improper permissions were assigned to a temporary directory created during the upgrade process. A low-privileged, local attacker could exploit this flaw to escalate their privileges to the SYSTEM account. The fix for this vulnerability was included in AnyConnect Secure Mobility Client for Windows 4.10MR7 (4.10.07073) and Cisco Secure Client for Windows 5.0MR2. Cisco AnyConnect Secure Mobility Client 4.10.06...

If your organization is currently on a lower version of AnyConnect 4.x, upgrading to 4.10.06 is crucial for several reasons:

Supports Red Hat (7 & 8) and Ubuntu (16.04, 18.04, 20.04). On macOS, improved behavior for server reachability tests

The Cisco AnyConnect Secure Mobility Client 4.10.06 is a widely used software application that provides secure remote access to enterprise networks. As a leading solution in the realm of remote access, it offers a range of features designed to ensure secure and reliable connections for users on the go. This article aims to provide an in-depth look at the capabilities, benefits, and key features of the Cisco AnyConnect Secure Mobility Client 4.10.06.

Running older versions like 4.10.x (earlier than 4.10MR7) may leave systems vulnerable to exploits. Privilege Escalation The fix for this vulnerability was included in

Administrators were also warned to patch two older AnyConnect flaws, CVE-2020-3433 and CVE-2020-3153, which had public exploit code available and were confirmed to be under active exploitation. These flaws allowed a chain of attacks that could result in arbitrary code execution with SYSTEM privileges on Windows.