ID:6341 - Exploit for Privilege escalation in Cisco Umbrella Enterprise Roaming Client - CVE-2018-0438

Link to public exploit:

Vulnerability description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The vulnerability exists due to improper implementation of file system permissions. A local attacker can place an executable file within the restricted directory, which when executed by the ERC client, would run with Administrator privileges.

Remediation