November 13, 2018—KB4464455 (OS Build 17763.107)

None None...

Cisco Wireless LAN Controller Software Elevation of Privilege Vulnerability

Cisco Wireless LAN Controller WLC is a wireless LAN controller product from Cisco USA. The product provides security policy, intrusion detection and other functions in the wireless LAN. An elevation of privilege vulnerability exists in Cisco Wireless LAN Controller Software due to the dynamic...

CVE-2018-0441

A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a corruption of certain timer mechanisms triggered by...

CVE-2018-0441 Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability

A vulnerability in the 802.11r Fast Transition feature set of Cisco IOS Access Points APs Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to a corruption of certain timer mechanisms triggered by...

CVE-2018-15395

A vulnerability in the authentication and authorization checking mechanisms of Cisco Wireless LAN Controller WLC Software could allow an authenticated, adjacent attacker to gain network access to a Cisco TrustSec domain. Under normal circumstances, this access should be prohibited. The...

CVE-2018-0438

A vulnerability in the Cisco Umbrella Enterprise Roaming Client ERC could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper...

CVE-2018-0437

A vulnerability in the Cisco Umbrella Enterprise Roaming Client ERC could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper...

CVE-2018-0438

CVE-2018-0438 affects Cisco Umbrella Enterprise Roaming Client (ERC). A local authenticated attacker can escalate to Administrator due to improper file system permission handling, enabling placement of a malicious executable in a restricted ERC directory (e.g., C:\ProgramData\OpenDNS\ERC) which, ...

CVE-2018-0437

CVE-2018-0437 affects Cisco Umbrella Enterprise Roaming Client (ERC) and related Roaming Module. Root cause: improper file system permissions allow non-admin users to place executables in restricted directories (e.g., C:\ProgramData\OpenDNS\ERC), which, when run, execute with Administrator privil...

Roaming Mantis, part III

In Q2 2018, Kaspersky Lab published two blogposts about Roaming Mantis sharing details of this new cybercriminal campaign. In the beginning, the criminals used DNS hijacking in vulnerable routers to spread malicious Android applications of Roaming Mantis aka MoqHao and XLoader, spoofing legitimat...

Cisco Umbrella Enterprise Roaming Client Input Validation Vulnerability

The Cisco Umbrella Enterprise Roaming Client ERC is a firewall security client from the American company Cisco. An input validation vulnerability exists in Cisco Umbrella ERC versions prior to 2.1.127, which stems from the program failing to implement file system permissions correctly, allowing a...

Cisco Umbrella Roaming Client 2.0.168 - Local Privilege Escalation

Cisco Umbrella Roaming Client 2.0.168 - Local Privilege Escalation / Exploit Title: Cisco Umbrella Roaming Client 2.0.168 - Privilege Escalation Date: 2018-04-06 Exploit Author: paragonsec @ Critical Start Vendor Homepage: https://www.opendns.com/ Version: Umbrella Roaming Client 2.0.168 Tested o...

Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Elevation of Privilege Vulnerability

Umbrella Roaming is a cloud-based security service for Cisco's next-generation firewall. An elevation of privilege vulnerability exists in the Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module, which stems from an incorrect implementation of file system permissions that allow...

[SECURITY] Fedora 27 Update: wpa_supplicant-2.6-14.fc27

wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...

July 24, 2018—KB4340917 (OS Build 17134.191)

None None...

UPM Roaming Profiles "Break" if App Layering Elastic Layering is Enabled

UPM roaming profiles "break" if enabling App Layering Elastic Layering feature. Can’t right click the start menu, can’t open programs, etc...

Roaming Mantis Swarms Globally, Spawning iOS Phishing, Cryptomining

The Roaming Mantis mobile banking trojan is roaming further afield than it ever has before. Recent analysis shows that the malware has rapidly evolved just in the past month. It’s now targeting Europe and the Middle East in addition to Asian countries. According to researchers, it’s following the...

DNS-Hijacking Malware Targeting iOS, Android and Desktop Users Worldwide

Widespread routers' DNS hijacking malware that recently found targeting Android devices has now been upgraded its capabilities to target iOS devices as well as desktop users. Dubbed Roaming Mantis, the malware was initially found hijacking Internet routers last month to distribute Android banking...

Roaming Mantis dabbles in mining and phishing multilingually

In April 2018, Kaspersky Lab published a blogpost titled 'Roaming Mantis uses DNS hijacking to infect Android smartphones'. Roaming Mantis uses Android malware which is designed to spread via DNS hijacking and targets Android devices. This activity is located mostly in Asia South Korea, Banglades...

Microsoft Office: Disable Roaming Office User Settings

This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013roamingofficeusersettings.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Disable Roaming Office User Settings Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...