EUVD-2018-1261

Malware in sbrugna...

CVE-2018-0437

CVE-2018-0437 affects Cisco Umbrella Enterprise Roaming Client (ERC) and related Roaming Module. Root cause: improper file system permissions allow non-admin users to place executables in restricted directories (e.g., C:\ProgramData\OpenDNS\ERC), which, when run, execute with Administrator privil...

CVE-2018-0438: Improper Input Validation

A vulnerability in the Cisco Umbrella Enterprise Roaming Client ERC could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper...

CVE-2018-0437: Improper Privilege Management

A vulnerability in the Cisco Umbrella Enterprise Roaming Client ERC could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper...

Cisco Umbrella Enterprise Roaming Client Input Validation Vulnerability

The Cisco Umbrella Enterprise Roaming Client ERC is a firewall security client from the American company Cisco. An input validation vulnerability exists in Cisco Umbrella ERC versions prior to 2.1.127, which stems from the program failing to implement file system permissions correctly, allowing a...