This script would execute with the privileges of the targeted An圜onnect user.
A successful exploit could allow an attacker to cause the targeted An圜onnect user to execute a script. An attacker could exploit this vulnerability by sending crafted IPC messages to the An圜onnect client IPC listener. The vulnerability is due to a lack of authentication to the IPC listener. I used to repackage software for enterprise deployment in a former life so I'm used to using transforms but it's really not necessary for this.A vulnerability in the interprocess communication (IPC) channel of Cisco An圜onnect Secure Mobility Client Software could allow an authenticated, local attacker to cause a targeted An圜onnect user to execute a malicious script. Or just edit the MSI directly and don't worry about all that. Msiexec /I anyconnect-win-arm64-3-core-vpn-predeploy-k9.msi TRANSFORMS=anyconnect-win-arm64-3-core-vpn-predeploy-k9-fix.mst Save it in the same folder as the original MSI and then open an administrative command prompt and change to the same directory as the MSI and MST. I called it anyconnect-win-arm64-3-core-vpn-predeploy-k9-fix.mst. Then from the Transform menu, select "Close Transform" and it will ask you to save the file. It will put a small highlight on the tables where it makes a change if you want to review. You can just chose "Replace All" if you don't want to watch where all the changes happen. Then I did the search and replace as Micke said. This then captures any changes in a separate file rather than altering the original.
Yeah, I opened the file in Orca and then went to the Transform menu and chose "New Transform".
0 kommentar(er)
