PT-2018-8829 · Cisco · Cisco Umbrella Enterprise Roaming Client

Paragonsec · Publicado 2018-10-05 · Atualizado 2019-10-09 · CVE-2018-0438

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Umbrella Enterprise Roaming Client (ERC) (affected versions not specified)

Description A vulnerability exists due to improper implementation of file system permissions, allowing non-administrative users to place files within restricted directories. An authenticated, local attacker could exploit this by placing an executable file within the restricted directory, which when executed by the ERC client, would run with Administrator privileges. The attacker must authenticate with valid local user credentials to exploit the issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Improper Privilege Management

Enumeração de Fraquezas

CWE-20

CWE-269

Identificadores relacionados

CVE-2018-0438

Produtos afetados

Cisco Umbrella Enterprise Roaming Client

Referências · 5

• 🔥 https://exploit-db.com/exploits/45339 · Exploit
• http://securityfocus.com/bid/105286 · Nota
• https://osv.dev/vulnerability/CVE-2018-0438 · Aviso do Fabricante
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-umbrella-file-read · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0438 · Nota de Segurança