Need Updated SecureClient installation files ASAP (CVE-2024-20337 and CVE-2024-20338)

[KenLux]

Hi,

There are two new high CVEs for Cisco SecureClient:

CVE-2024-20337: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-client...

 and

CVE-2024-20338: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-secure-prives...

Remediation requires updating clients with version 5.1.2.42 or higher. When I log into my MX, I see version 5.1.1.42 being available.

Since we don't have a service contract with Cisco, we are not able to download or even purchase the updated version.

When will Meraki update the link so we can update our AnyConnect client software?

Thanks,

Ken

[alemabrahao]

• For the latest Secure Client versions, please go to the Cisco support page to download the Secure client.

[KenLux]

You can only download SecureClient from that page if you have a Cisco service account.

If you don't, you need to use the links on the AnyConnect page on the MX web page.

[alemabrahao]

Because this is correct, you must have a valid account and license for your users.

😉

[KenLux]

We get our license through Meraki instead of a service contract with Cisco.

[alemabrahao]

It is a recommendation from Meraki to download from the website, just log in with your CCO.

[CptnCrnch]

Sorry, but there is any Secure Client license you‘d be able to purchase from Meraki. Strictly speaking, you’re not even allowed to use Secure Client without having the licenses in place. 🤔

[KenLux · Accepted solution]

Actually, it looks like Meraki just updated the link.

Go to Security & SD-WAN-->Client VPN-->AnyConnect

Version 5.1.2.42 is available now.

[PhilipDAth]

>Since we don't have a service contract with Cisco, we are not able to download or even purchase the updated version.

Just a note: whenever you buy "term" AnyConnect licences (1, 3, or 5 years), you get a service contract. You register that, and then you can download it.

Everyone using AnyConnect should have a licence for it ... (it is just an honesty-based licence).