Is CVE-2021-1429 actively exploited?

No active exploitation of CVE-2021-1429 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2021-1429 be exploited remotely?

No. CVE-2021-1429 requires local access to exploit.

What is the CVSS score of CVE-2021-1429?

CVE-2021-1429 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2021-1429

HIGH

CVE-2021-1429

CWE-378Published: May 6, 2021· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execute arbitrary code on an affected device with SYSTEM privileges. To exploit these vulnerabilities, the attacker must have valid credentials on the Windows system. For more information about these vulnerabilities, see the Details section of this advisory.

NVD Source

Technical Analysis

CVE-2021-1429 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.