CVE-2018-0373: A vulnerability in vpnva-6.sys for 32-bit Windows and vpnva64-6.sys for 64-bit Windows of Cisco AnyConnect...

Security readout for executives and security teams

This CVE affects Cisco AnyConnect Secure Mobility Client on Windows. A signed-in local attacker could abuse improper input validation in AnyConnect Windows driver components to cause a denial-of-service condition on the affected system. The bundle does not provide a CVSS score, affected version range, or confirmed fixed release. Exposure is likely limited to Windows desktops or laptops running Cisco AnyConnect Secure Mobility Client with the affected driver files. The source bundle does not identify exact vulnerable versions, so asset inventory must be matched against Cisco’s advisory before determining scope. Handle through normal endpoint patch governance unless the environment depends heavily on AnyConnect-connected Windows systems for critical operations. The risk is meaningful but appears constrained by local authenticated access and denial-of-service impact. Scope confirmation is the immediate priority because version details are not present in the bundle. Mitigation focus: Review Cisco advisory cisco-sa-20180620-anyconnect-dos for affected and fixed versions.; Inventory Windows endpoints running Cisco AnyConnect Secure Mobility Client.; Prioritize remediation for shared workstations, kiosks, and high-availability operational endpoints..

Prepared

Jun 7, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.