CVE-2018-0437

CVE-2018-0437 affects Cisco Umbrella Enterprise Roaming Client (ERC) and related Roaming Module. Root cause: improper file system permissions allow non-admin users to place executables in restricted directories (e.g., C:\ProgramData\OpenDNS\ERC), which, when run, execute with Administrator privil...

CVE-2018-0438

CVE-2018-0438 affects Cisco Umbrella Enterprise Roaming Client (ERC). A local authenticated attacker can escalate to Administrator due to improper file system permission handling, enabling placement of a malicious executable in a restricted ERC directory (e.g., C:\ProgramData\OpenDNS\ERC) which, ...