21 matches found
EUVD-2018-1261
Malware in sbrugna...
EUVD-2019-6893
Malware in sbrugna...
CVE-2019-16000
A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...
CVE-2019-16000 Cisco Umbrella Roaming Client for Windows Install Vulnerability
A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...
CVE-2019-16000 Cisco Umbrella Roaming Client for Windows Install Vulnerability
A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...
CVE-2019-16000
CVE-2019-16000 affects the Cisco Umbrella Roaming Client for Windows. The issue is in the automatic update process where Windows Installer verification is insufficient, allowing an authenticated, local attacker to place a file in a specific location and bypass policy to install unapproved applica...
CVE-2019-16000: Insufficient Verification of Data Authenticity
A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...
Umbrella Roaming Client Automatic Update Arbitrary Application Installation
The vulnerability of the automatic update function for the Umbrella Roaming Client security service for Windows devices relates to insufficient data authentication checks. Exploiting this vulnerability could allow attackers to install arbitrary applications on target devices...
Cisco Umbrella Roaming Client for Windows Installation Vulnerability
The Cisco Umbrella Roaming Client is a very lightweight DNS client that runs on Windows or Mac OS X computers. An installation vulnerability exists in the automatic update process of Cisco Umbrella Roaming Client for Windows 2.2.238. The vulnerability stems from insufficient authentication in...
Cisco Umbrella Roaming Client for Windows Install Vulnerability
A vulnerability in the automatic update process of Cisco Umbrella Roaming Client for Windows could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted device. The vulnerability is due to insufficient verification of the Windows Installer. An attacker...
PT-2020-1437
Name of the Vulnerable Software and Affected Versions Cisco Umbrella Roaming Client for Windows affected versions not specified Description A vulnerability in the automatic update process could allow an authenticated, local attacker to install arbitrary, unapproved applications on a targeted...
CVE-2018-0438
A vulnerability in the Cisco Umbrella Enterprise Roaming Client ERC could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper...
CVE-2018-0437
A vulnerability in the Cisco Umbrella Enterprise Roaming Client ERC could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper...
CVE-2018-0437
CVE-2018-0437 affects Cisco Umbrella Enterprise Roaming Client (ERC) and related Roaming Module. Root cause: improper file system permissions allow non-admin users to place executables in restricted directories (e.g., C:\ProgramData\OpenDNS\ERC), which, when run, execute with Administrator privil...
CVE-2018-0438: Improper Input Validation
A vulnerability in the Cisco Umbrella Enterprise Roaming Client ERC could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper...
CVE-2018-0437: Improper Privilege Management
A vulnerability in the Cisco Umbrella Enterprise Roaming Client ERC could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper...
PT-2018-8829
Name of the Vulnerable Software and Affected Versions Cisco Umbrella Enterprise Roaming Client ERC affected versions not specified Description A vulnerability exists due to improper implementation of file system permissions, allowing non-administrative users to place files within restricted...
PT-2018-8828
Name of the Vulnerable Software and Affected Versions Cisco Umbrella Enterprise Roaming Client ERC affected versions not specified Description A vulnerability exists due to improper implementation of file system permissions, allowing non-administrative users to place files within restricted...
Cisco Umbrella Enterprise Roaming Client Input Validation Vulnerability
The Cisco Umbrella Enterprise Roaming Client ERC is a firewall security client from the American company Cisco. An input validation vulnerability exists in Cisco Umbrella ERC versions prior to 2.1.127, which stems from the program failing to implement file system permissions correctly, allowing a...
Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Elevation of Privilege Vulnerability
Umbrella Roaming is a cloud-based security service for Cisco's next-generation firewall. An elevation of privilege vulnerability exists in the Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module, which stems from an incorrect implementation of file system permissions that allow...