CVE-2021-1428

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execute arbitrary code on an affected device with SYSTEM privileges. To exploit these vulnerabilities, the attacker must have valid credentials on the Windows system. For more information about these vulnerabilities, see the Details section of this advisory.

• CWE-378
• CWE-427

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6Vendor Advisory

Published

May 6, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1422A vulnerability in the software cryptography module of Cisco…7.7
• CVE-2021-1423A vulnerability in the implementation of a CLI command in Ci…4.4
• CVE-2021-1424A vulnerability in the ipsecmgr process of Cisco ASR 50…5.3
• CVE-2021-1425A vulnerability in the web-based management interface of Cis…6.5
• CVE-2021-1426Multiple vulnerabilities in the install, uninstall, and upgr…7.8
• CVE-2021-1427Multiple vulnerabilities in the install, uninstall, and upgr…7.8
• CVE-2021-1429Multiple vulnerabilities in the install, uninstall, and upgr…7.8
• CVE-2021-1430Multiple vulnerabilities in the install, uninstall, and upgr…7.8
• CVE-2021-1431A vulnerability in the vDaemon process of Cisco IOS XE SD-WA…7.5
• CVE-2021-1432A vulnerability in the CLI of Cisco IOS XE SD-WAN Software c…7.3
• CVE-2021-1433A vulnerability in the vDaemon process in Cisco IOS XE SD-WA…8.1
• CVE-2021-1434A vulnerability in the CLI of Cisco IOS XE SD-WAN Software c…6