PatchTheCVECVE-2024-20338: A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authen
CVE-2024-20338 is a high-severity flaw (CVSS 7.3) affecting secure client. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to the use of an uncontrolled search path element. An attacker could exploit this vulnerability by copying a malicious library file to a specific directory in the filesystem and persuading an administrator to restart a specific process. A suc
Why this priority
- High severity
- On your watchlist
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.3 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | Required |
| EPSS exploit chance | 0.9% (top 41%) |
| CISA exploited list | No |
| Weakness | CWE-427 |
| Published | 2024-03-06 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-20338?
secure client: upgrade to 5.1.2.42. Exact commands for each OS are on this page.
Is CVE-2024-20338 being exploited?
CVE-2024-20338 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-20338 affect?
CVE-2024-20338 affects secure client. Severity is high (CVSS 7.3). A vulnerability in the ISE Posture (System Scan) module of Cisco Secure Client for Linux could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to the use of an uncontrolled se
How urgent is CVE-2024-20338?
Priority 45/100. High severity; On your watchlist
Software pages
Related CVEs
- CVE-2023-20178 HIGH 7.8 UPGRADE UPGRADE A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows a
- CVE-2025-20206 HIGH 7.1 UPGRADE A vulnerability in the interprocess communication (IPC) channel of Cisco Secure Client for Windows could allow
- CVE-2024-3661 HIGH 7.6 UPGRADE UPGRADE DHCP can add routes to a client’s routing table via the classless static route option (121)
- CVE-2024-20474 MEDIUM 4.3 DOWNGRADE DOWNGRADE A vulnerability in Internet Key Exchange version 2 (IKEv2) processing of Cisco Secure Client Software could al
- CVE-2024-20337 HIGH 8.2 UPGRADE A vulnerability in the SAML authentication process of Cisco Secure Client could allow an unauthenticated, remo