PT-2018-8828 · Cisco · Cisco Umbrella Enterprise Roaming Client

Paragonsec · Publicado 2018-10-05 · Atualizado 2019-10-09 · CVE-2018-0437

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Umbrella Enterprise Roaming Client (ERC) (affected versions not specified)

Description A vulnerability exists due to improper implementation of file system permissions, allowing non-administrative users to place files within restricted directories. An authenticated, local attacker could exploit this by placing an executable file within the restricted directory, which when executed by the ERC client, would run with Administrator privileges. The attacker must authenticate with valid local user credentials to exploit the issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Privilege Management

Enumeração de Fraquezas

CWE-264

CWE-269

Identificadores relacionados

CVE-2018-0437

Produtos afetados

Cisco Umbrella Enterprise Roaming Client

Referências · 5

• 🔥 https://exploit-db.com/exploits/45339 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-0437 · Nota de Segurança
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-umbrella-priv · Aviso do Fabricante
• http://securityfocus.com/bid/105292 · Nota
• https://osv.dev/vulnerability/CVE-2018-0437 · Aviso do Fabricante