Cisco Umbrella Enterprise Roaming Client 2.0.168

CPE Details

Cisco Umbrella Enterprise Roaming Client 2.0.168
cisco
umbrella_enterprise_roaming_client
2.0.168
2019-12-10
13h29 +00:00
2019-12-10
13h29 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:cisco:umbrella_enterprise_roaming_client:2.0.168:*:*:*:*:*:*:*

Informations

Vendor

cisco

Product

umbrella_enterprise_roaming_client

Version

2.0.168

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2018-0437 2018-10-05 14h00 +00:00 A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper implementation of file system permissions, which could allow non-administrative users to place files within restricted directories. An attacker could exploit this vulnerability by placing an executable file within the restricted directory, which when executed by the ERC client, would run with Administrator privileges.
7.8
Haute
CVE-2018-0438 2018-10-05 14h00 +00:00 A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper implementation of file system permissions, which could allow non-administrative users to place files within restricted directories. An attacker could exploit this vulnerability by placing an executable file within the restricted directory, which when executed by the ERC client, would run with Administrator privileges.
7.8
Haute