Lucene search

[email protected]CVE-2018-0437

HistoryOct 05, 2018 - 2:29 p.m.

CVE-2018-0437

2018-10-0514:29:02

CWE-269

CWE-264

[email protected]

web.nvd.nist.gov

cisco

umbrella

enterprise roaming client

vulnerability

cve-2018-0437

local attacker

privilege escalation

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper implementation of file system permissions, which could allow non-administrative users to place files within restricted directories. An attacker could exploit this vulnerability by placing an executable file within the restricted directory, which when executed by the ERC client, would run with Administrator privileges.

Affected configurations

NVD

Node

ciscoumbrella_enterprise_roaming_clientRange<2.1.118

AND

microsoftwindowsMatch-

Node

ciscoumbrella_roaming_moduleRange<4.6.1098

ciscoumbrella_roaming_moduleMatch4.3\(1095\)anyconnect

CPENameOperatorVersion
cisco:umbrella_enterprise_roaming_clientcisco umbrella enterprise roaming clientlt2.1.118

CPE	Name	Operator	Version
cisco:umbrella_enterprise_roaming_client	cisco umbrella enterprise roaming client	lt	2.1.118

CNA Affected

[
  {
    "product": "Cisco Umbrella ",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]