Main Vulnerability Database Vulnerabilities #VU14678

Privilege escalation in Cisco Umbrella Enterprise Roaming Client - CVE-2018-0437

Published: September 5, 2018 / Updated: June 17, 2021

Vulnerability identifier: #VU14678

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2018-0437

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The vulnerability exists due to improper implementation of file system permissions. A local attacker can place an executable file within the restricted directory, which when executed by the ERC client, would run with Administrator privileges.

Affected software

Cisco Umbrella Enterprise Roaming Client
Cisco Umbrella Roaming Module

How to mitigate CVE-2018-0437

Update Cisco Umbrella ERC to version 2.1.118.

Cisco Umbrella Enterprise Roaming Client - update to 2.1.118
Cisco Umbrella Roaming Module - update to 4.6.1098

Links to Public Exploits and PoC-codes

Exploit #6342 - Cisco Umbrella Roaming Client 2.0.168 - Local Privilege Escalation (June 17, 2021)

External References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-umbrella-pri...