EUVD-2018-1261

Malware in sbrugna...

CVE-2018-0437

CVE-2018-0437 affects Cisco Umbrella Enterprise Roaming Client (ERC) and related Roaming Module. Root cause: improper file system permissions allow non-admin users to place executables in restricted directories (e.g., C:\ProgramData\OpenDNS\ERC), which, when run, execute with Administrator privil...

CVE-2018-0437: Improper Privilege Management

A vulnerability in the Cisco Umbrella Enterprise Roaming Client ERC could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper...

PT-2018-8828

Name of the Vulnerable Software and Affected Versions Cisco Umbrella Enterprise Roaming Client ERC affected versions not specified Description A vulnerability exists due to improper implementation of file system permissions, allowing non-administrative users to place files within restricted...

PT-2018-8829

Name of the Vulnerable Software and Affected Versions Cisco Umbrella Enterprise Roaming Client ERC affected versions not specified Description A vulnerability exists due to improper implementation of file system permissions, allowing non-administrative users to place files within restricted...

CVE-2018-0438: Improper Input Validation

A vulnerability in the Cisco Umbrella Enterprise Roaming Client ERC could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper...

Cisco Umbrella Enterprise Roaming Client Input Validation Vulnerability

The Cisco Umbrella Enterprise Roaming Client ERC is a firewall security client from the American company Cisco. An input validation vulnerability exists in Cisco Umbrella ERC versions prior to 2.1.127, which stems from the program failing to implement file system permissions correctly, allowing a...