Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Umbrella Enterprise Roaming Client and Enterprise Roaming Module Privilege Escalation Vulnerability
Vulnerability Description
A vulnerability in the Cisco Umbrella Enterprise Roaming Client (ERC) could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper implementation of file system permissions, which could allow non-administrative users to place files within restricted directories. An attacker could exploit this vulnerability by placing an executable file within the restricted directory, which when executed by the ERC client, would run with Administrator privileges.
CVSS Information
N/A
Vulnerability Type
权限、特权和访问控制
Vulnerability Title
Cisco Umbrella Enterprise Roaming Client和Roaming Module 权限许可和访问控制漏洞
Vulnerability Description
Cisco Umbrella Enterprise Roaming Client（ERC）和Roaming Module都是美国思科（Cisco）公司的产品。Cisco Umbrella Enterprise Roaming Client（ERC）是一款防火墙安全客户端。Roaming Module是一个漫游控制模块。 Cisco Umbrella ERC 2.1.118之前版本和Roaming Module 4.6.1098之前版本中存在权限许可和访问控制漏洞，该漏洞源于程序没有正确的实现文件系统权限，
CVSS Information
N/A
Vulnerability Type
N/A