PT-2018-8829 · Cisco · Cisco Umbrella Enterprise Roaming Client

Paragonsec · Published 2018-10-05 · Updated 2019-10-09 · CVE-2018-0438

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Umbrella Enterprise Roaming Client (ERC) (affected versions not specified)

Description A vulnerability exists due to improper implementation of file system permissions, allowing non-administrative users to place files within restricted directories. An authenticated, local attacker could exploit this by placing an executable file within the restricted directory, which when executed by the ERC client, would run with Administrator privileges. The attacker must authenticate with valid local user credentials to exploit the issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Improper Privilege Management

Weakness Enumeration

CWE-20

CWE-269

Related Identifiers

CVE-2018-0438

Affected Products

Cisco Umbrella Enterprise Roaming Client

References · 5

• 🔥 https://exploit-db.com/exploits/45339 · Exploit
• https://osv.dev/vulnerability/CVE-2018-0438 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-umbrella-file-read · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-0438 · Security Note
• http://securityfocus.com/bid/105286 · Note